CVE-2013-1406

The Virtual Machine Communication Interface (VMCI) implementation in vmci.sys in VMware Workstation 8.x before 8.0.5 and 9.x before 9.0.1 on Windows, VMware Fusion 4.1 before 4.1.4 and 5.0 before 5.0.2, VMware View 4.x before 4.6.2 and 5.x before 5.1.2 on Windows, VMware ESXi 4.0 through 5.1, and VMware ESX 4.0 and 4.1 does not properly restrict memory allocation by control code, which allows local users to gain privileges via unspecified vectors.

Affected products

Vmware Esxi, Vmware Fusion, Vmware View, Vmware Workstation

Vmware Workstation

= 8.0, 8.0.0.18997, 8.0.1, 8.0.1.27038, 8.0.2, 8.0.3, 8.0.4, 9.0

Fix

Available

CVSS 2.0

7.2 HIGH

EPSS

1.0% (59th percentile)

Weakness

CWE-20

NVD status

Modified

Published

2013-02-11