CVEvulnerability
CVE-2011-1787
6.9 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2011-06-06
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.9 MEDIUM — AV:L/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-362
Description
Race condition in mount.vmhgfs in the VMware Host Guest File System (HGFS) in VMware Workstation 7.1.x before 7.1.4, VMware Player 3.1.x before 3.1.4, VMware Fusion 3.1.x before 3.1.3, VMware ESXi 3.5 through 4.1, and VMware ESX 3.0.3 through 4.1 allows guest OS users to gain privileges on the guest OS by mounting a filesystem on top of an arbitrary directory.
Affected configurations
• vmware workstation 7.1.1
• vmware workstation 7.1.2
• vmware workstation 7.1.3
• vmware player 3.1
• vmware player 3.1.1
• vmware player 3.1.2
• vmware player 3.1.3
• vmware fusion 3.1
• vmware fusion 3.1.1
• vmware fusion 3.1.2
• vmware esx 3.0.3
• vmware esx 3.5
• vmware esx 4.0
• vmware esx 4.1
• vmware esxi 3.5
• vmware esxi 4.0
• vmware esxi 4.1
Related
Weakness · CWE (1)
- CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization weakness
References
- http://secunia.com/advisories/44840 secunia.com
- http://secunia.com/advisories/44904 secunia.com
- http://www.securityfocus.com/bid/48098 www.securityfocus.com
- http://www.securitytracker.com/id?1025601 www.securitytracker.com
- http://www.vmware.com/security/advisories/VMSA-2011-0009.html Patch, Vendor Advisory
- https://hermes.opensuse.org/messages/8711677 hermes.opensuse.org
- http://secunia.com/advisories/44840 secunia.com
- http://secunia.com/advisories/44904 secunia.com
- http://www.securityfocus.com/bid/48098 www.securityfocus.com
- http://www.securitytracker.com/id?1025601 www.securitytracker.com
- http://www.vmware.com/security/advisories/VMSA-2011-0009.html Patch, Vendor Advisory
- https://hermes.opensuse.org/messages/8711677 hermes.opensuse.org