Local Privilege Escalation Vulnerability (CVE-2014-3793) for multiple VMware Products)

Release date:
Updated on: 2014-06-03

Affected Systems:
VMWare Workstation <10.0.2
VMWare Player <6.0.2
Description:
--------------------------------------------------------------------------------
Bugtraq id: 67737
CVE (CAN) ID: CVE-2014-3793
 
VMWare is a "Virtual PC" software that can run two or more Windows, DOS, and LINUX systems simultaneously on one machine.
 
VMware Workstation versions earlier than 10.0.2, VMware Player versions earlier than 6.0.2, VMware Fusion 6.0.3, ESXi 5.5 (unpatched ESXi550-201403102-SG), ESXi 5.1 (unpatched ESXi510-201404102-SG), ESXi 5.0 (no patch ESXi500-201405102-SG) has a Local Elevation of Privilege Vulnerability, local attackers can exploit this vulnerability to gain Elevation of Privilege.
 
<* Source: Tavis Ormandy (taviso@gentoo.org)
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:
 
VMWare
------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:
 
Http://www.vmware.com/security/advisories/VMSA-2014-0005.html

How to install SteamOS in VirtualBox

Install Ubuntu 14.04 on a VMware Workstation 10 Virtual Machine in Windows 7

This article permanently updates the link address: