NetSight
IP …
high7.8Public exploit code

CVE-2016-5330

Untrusted search path vulnerability in the HGFS (aka Shared Folders) feature in VMware Tools 10.0.5 in VMware ESXi 5.0 through 6.0, VMware Workstation Pro 12.1…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Untrusted search path vulnerability in the HGFS (aka Shared Folders) feature in VMware Tools 10.0.5 in VMware ESXi 5.0 through 6.0, VMware Workstation Pro 12.1.x before 12.1.1, VMware Workstation Player 12.1.x before 12.1.1, and VMware Fusion 8.1.x before 8.1.1 allows local users to gain privileges via a Trojan horse DLL in the current working directory.

Affected products

VendorProductAffected versions
VmwareWorkstation Player
from 12.1.0 before 12.1.1
VmwareWorkstation Pro
from 12.1.0 before 12.1.1
VmwareEsxi
from 5.0 through 6.0
VmwareFusion
from 8.1 before 8.1.1
VmwareTools
from 9.0.0 through 10.3.22

Weakness classification

CWE-426

References