7.2

CVE-2013-1406

The Virtual Machine Communication Interface (VMCI) implementation in vmci.sys in VMware Workstation 8.x before 8.0.5 and 9.x before 9.0.1 on Windows, VMware Fusion 4.1 before 4.1.4 and 5.0 before 5.0.2, VMware View 4.x before 4.6.2 and 5.x before 5.1.2 on Windows, VMware ESXi 4.0 through 5.1, and VMware ESX 4.0 and 4.1 does not properly restrict memory allocation by control code, which allows local users to gain privileges via unspecified vectors.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
VMware ≫ Workstation Version 8.0
   Microsoft ≫ Windows
VMware ≫ Workstation Version 8.0.0.18997
   Microsoft ≫ Windows
VMware ≫ Workstation Version 8.0.1
   Microsoft ≫ Windows
VMware ≫ Workstation Version 8.0.1.27038
   Microsoft ≫ Windows
VMware ≫ Workstation Version 8.0.2
   Microsoft ≫ Windows
VMware ≫ Workstation Version 8.0.3
   Microsoft ≫ Windows
VMware ≫ Workstation Version 8.0.4
   Microsoft ≫ Windows
VMware ≫ Workstation Version 9.0
   Microsoft ≫ Windows
VMware ≫ Fusion Version 4.1
VMware ≫ Fusion Version 4.1.1
VMware ≫ Fusion Version 4.1.2
VMware ≫ Fusion Version 4.1.3
VMware ≫ Fusion Version 5.0
VMware ≫ Fusion Version 5.0.1
VMware ≫ View Version 4.0.0
   Microsoft ≫ Windows
VMware ≫ View Version 4.0.0 Update u2
   Microsoft ≫ Windows
VMware ≫ View Version 4.5
   Microsoft ≫ Windows
VMware ≫ View Version 4.6.0
   Microsoft ≫ Windows
VMware ≫ View Version 4.6.1
   Microsoft ≫ Windows
VMware ≫ View Version 5.0
   Microsoft ≫ Windows
VMware ≫ View Version 5.0.0
   Microsoft ≫ Windows
VMware ≫ View Version 5.0.0 Update u2
   Microsoft ≫ Windows
VMware ≫ View Version 5.0.1
   Microsoft ≫ Windows
VMware ≫ View Version 5.1.0
   Microsoft ≫ Windows
VMware ≫ View Version 5.1.1
   Microsoft ≫ Windows
VMware ≫ ESXi Version 4.0
VMware ≫ ESXi Version 4.0 Update 1
VMware ≫ ESXi Version 4.0 Update 2
VMware ≫ ESXi Version 4.0 Update 3
VMware ≫ ESXi Version 4.0 Update 4
VMware ≫ ESXi Version 4.1
VMware ≫ ESXi Version 4.1 Update 1
VMware ≫ ESXi Version 4.1 Update 2
VMware ≫ ESXi Version 5.0
VMware ≫ ESXi Version 5.0 Update 1
VMware ≫ ESXi Version 5.0 Update 2
VMware ≫ ESXi Version 5.1
VMware ≫ Esx Version 4.0
VMware ≫ Esx Version 4.1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.97% 0.572
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://www.vmware.com/security/advisories/VMSA-2013-0002.html
Vendor Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17164