CVE-2013-3519

EPSS 0.17%
Published 04.12.2013 18:56:56
Last modified 11.04.2025 00:51:21
Source cve@mitre.org
Teams watchlist Login
Open Login

lgtosync.sys in VMware Workstation 9.x before 9.0.3, VMware Player 5.x before 5.0.3, VMware Fusion 5.x before 5.0.4, VMware ESXi 4.0 through 5.1, and VMware ESX 4.0 and 4.1, when a 32-bit Windows guest OS is used, allows guest OS users to gain guest OS privileges via an application that performs a crafted memory allocation.

Affected products Warnungen 0 Metrics 2 CWE 0 References 4

Data is provided by the National Vulnerability Database (NVD)

VMware ≫ ESXi Version4.0

VMware ≫ ESXi Version4.1

VMware ≫ ESXi Version5.0

VMware ≫ ESXi Version5.1

VMware ≫ Workstation Version9.0

VMware ≫ Workstation Version9.0.1

VMware ≫ Workstation Version9.0.2

VMware ≫ Esx Version4.0

VMware ≫ Esx Version4.1

VMware ≫ Player Version5.0

VMware ≫ Player Version5.0.1

VMware ≫ Player Version5.0.2

VMware ≫ Fusion Version5.0

VMware ≫ Fusion Version5.0.1

VMware ≫ Fusion Version5.0.2

VMware ≫ Fusion Version5.0.3

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.17%	0.388

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	7.9	5.5	10	AV:A/AC:M/Au:N/C:C/I:C/A:C

http://www.vmware.com/security/advisories/VMSA-2013-0014.html

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2013-3519

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2013-3519

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2013-3519

EUVD