NetSight
medium6.4

CVE-2014-8370

VMware Workstation 10.x before 10.0.5, VMware Player 6.x before 6.0.5, VMware Fusion 6.x before 6.0.5, and VMware ESXi 5.0 through 5.5 allow host OS users to g…

Impact

VMware Workstation 10.x before 10.0.5, VMware Player 6.x before 6.0.5, VMware Fusion 6.x before 6.0.5, and VMware ESXi 5.0 through 5.5 allow host OS users to gain host OS privileges or cause a denial of service (arbitrary write to a file) by modifying a configuration file.

Affected products

VendorProductAffected versions
VmwarePlayer
Versions 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4
VmwareFusion
Versions 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4
VmwareWorkstation
Versions 10.0, 10.0.1, 10.0.2, 10.0.3, 10.0.4
VmwareEsxi
Versions 5.0, 5.1, 5.5

Weakness classification

References