7.9

CVE-2013-3519

lgtosync.sys in VMware Workstation 9.x before 9.0.3, VMware Player 5.x before 5.0.3, VMware Fusion 5.x before 5.0.4, VMware ESXi 4.0 through 5.1, and VMware ESX 4.0 and 4.1, when a 32-bit Windows guest OS is used, allows guest OS users to gain guest OS privileges via an application that performs a crafted memory allocation.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
VMware ≫ ESXi Version 4.0
VMware ≫ ESXi Version 4.1
VMware ≫ ESXi Version 5.0
VMware ≫ ESXi Version 5.1
VMware ≫ Workstation Version 9.0
VMware ≫ Workstation Version 9.0.1
VMware ≫ Workstation Version 9.0.2
VMware ≫ Esx Version 4.0
VMware ≫ Esx Version 4.1
VMware ≫ Player Version 5.0
VMware ≫ Player Version 5.0.1
VMware ≫ Player Version 5.0.2
VMware ≫ Fusion Version 5.0
VMware ≫ Fusion Version 5.0.1
VMware ≫ Fusion Version 5.0.2
VMware ≫ Fusion Version 5.0.3
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.51% 0.391
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.9 5.5 10
AV:A/AC:M/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.vmware.com/security/advisories/VMSA-2013-0014.html
Vendor Advisory