CVEvulnerability

CVE-2013-1406

7.2 HIGH Published 2013-02-11 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2013-02-11
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-20

Description

The Virtual Machine Communication Interface (VMCI) implementation in vmci.sys in VMware Workstation 8.x before 8.0.5 and 9.x before 9.0.1 on Windows, VMware Fusion 4.1 before 4.1.4 and 5.0 before 5.0.2, VMware View 4.x before 4.6.2 and 5.x before 5.1.2 on Windows, VMware ESXi 4.0 through 5.1, and VMware ESX 4.0 and 4.1 does not properly restrict memory allocation by control code, which allows local users to gain privileges via unspecified vectors.

Affected configurations

• vmware workstation 8.0 • vmware workstation 8.0.0.18997 • vmware workstation 8.0.1 • vmware workstation 8.0.1.27038 • vmware workstation 8.0.2 • vmware workstation 8.0.3 • vmware workstation 8.0.4 • vmware workstation 9.0 • vmware fusion 4.1 • vmware fusion 4.1.1 • vmware fusion 4.1.2 • vmware fusion 4.1.3 • vmware fusion 5.0 • vmware fusion 5.0.1 • vmware view 4.0.0 • vmware view 4.5 • vmware view 4.6.0 • vmware view 4.6.1 • vmware view 5.0 • vmware view 5.0.0 • vmware view 5.0.1 • vmware view 5.1.0 • vmware view 5.1.1 • vmware esxi 4.0 • vmware esxi 4.1 • vmware esxi 5.0 • vmware esxi 5.1 • vmware esx 4.0 • vmware esx 4.1

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References