7.2

CVE-2013-1406

The Virtual Machine Communication Interface (VMCI) implementation in vmci.sys in VMware Workstation 8.x before 8.0.5 and 9.x before 9.0.1 on Windows, VMware Fusion 4.1 before 4.1.4 and 5.0 before 5.0.2, VMware View 4.x before 4.6.2 and 5.x before 5.1.2 on Windows, VMware ESXi 4.0 through 5.1, and VMware ESX 4.0 and 4.1 does not properly restrict memory allocation by control code, which allows local users to gain privileges via unspecified vectors.

Data is provided by the National Vulnerability Database (NVD)
VMware ≫ Workstation Version8.0
   Microsoft ≫ Windows
VMware ≫ Workstation Version8.0.0.18997
   Microsoft ≫ Windows
VMware ≫ Workstation Version8.0.1
   Microsoft ≫ Windows
VMware ≫ Workstation Version8.0.1.27038
   Microsoft ≫ Windows
VMware ≫ Workstation Version8.0.2
   Microsoft ≫ Windows
VMware ≫ Workstation Version8.0.3
   Microsoft ≫ Windows
VMware ≫ Workstation Version8.0.4
   Microsoft ≫ Windows
VMware ≫ Workstation Version9.0
   Microsoft ≫ Windows
VMware ≫ Fusion Version4.1
VMware ≫ Fusion Version4.1.1
VMware ≫ Fusion Version4.1.2
VMware ≫ Fusion Version4.1.3
VMware ≫ Fusion Version5.0
VMware ≫ Fusion Version5.0.1
VMware ≫ View Version4.0.0
   Microsoft ≫ Windows
VMware ≫ View Version4.0.0 Updateu2
   Microsoft ≫ Windows
VMware ≫ View Version4.5
   Microsoft ≫ Windows
VMware ≫ View Version4.6.0
   Microsoft ≫ Windows
VMware ≫ View Version4.6.1
   Microsoft ≫ Windows
VMware ≫ View Version5.0
   Microsoft ≫ Windows
VMware ≫ View Version5.0.0
   Microsoft ≫ Windows
VMware ≫ View Version5.0.0 Updateu2
   Microsoft ≫ Windows
VMware ≫ View Version5.0.1
   Microsoft ≫ Windows
VMware ≫ View Version5.1.0
   Microsoft ≫ Windows
VMware ≫ View Version5.1.1
   Microsoft ≫ Windows
VMware ≫ ESXi Version4.0
VMware ≫ ESXi Version4.0 Update1
VMware ≫ ESXi Version4.0 Update2
VMware ≫ ESXi Version4.0 Update3
VMware ≫ ESXi Version4.0 Update4
VMware ≫ ESXi Version4.1
VMware ≫ ESXi Version4.1 Update1
VMware ≫ ESXi Version4.1 Update2
VMware ≫ ESXi Version5.0
VMware ≫ ESXi Version5.0 Update1
VMware ≫ ESXi Version5.0 Update2
VMware ≫ ESXi Version5.1
VMware ≫ Esx Version4.0
VMware ≫ Esx Version4.1
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.74% 0.72
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.