CVE-2013-1406

The Virtual Machine Communication Interface (VMCI) implementation in vmci.sys in VMware Workstation 8.x before 8.0.5 and 9.x before 9.0.1 on Windows, VMware Fusion 4.1 before 4.1.4 and 5.0 before 5.0.2, VMware View 4.x before 4.6.2 and 5.x before 5.1.2 on Windows, VMware ESXi 4.0 through 5.1, and VMware ESX 4.0 and 4.1 does not properly restrict memory allocation by control code, which allows local users to gain privileges via unspecified vectors.

Score

CVSS 2.0 7.2 High

Status

Modified - cve@mitre.org

Published

2013-02-11

Last modified

2024-08-06

Weaknesses

CWE-20

Affected products

• Esx (Vmware)
• Esxi (Vmware)
• Fusion (Vmware)
• View (Vmware)
• Workstation (Vmware)

References

• http://www.vmware.com/security/advisories/VMSA-2013-0002.html
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17164