Lucene search

K
kasperskyKaspersky LabKLA10624
HistoryJul 09, 2015 - 12:00 a.m.

KLA10624 Privelege escalation vulnerability in VMware products

2015-07-0900:00:00
Kaspersky Lab
threats.kaspersky.com
22

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

23.7%

Detect date:

07/09/2015

Severity:

High

Description:

An unspecified vulnerability was found in VMware products. By exploiting this vulnerability malicious users can gain privileges. This vulnerability can be exploited remotely via a thread manipulations.

Affected products:

VMware Workstation for Windows 11 versions earlier than 11.1.1
VMware Workstation for Windows 10 versions earlier than 10.0.7
VMware Player for Windows 7 versions earlier than 7.1.1
VMware Player for Windows 6 versions earlier than 6.0.7
VMware Horizon Client for Windows 5 versions earlier than 5.4.2

Solution:

Update to the latest version
VMware products download

Original advisories:

VMware advisory

Impacts:

PE

Related products:

VMware Workstation

CVE-IDS:

CVE-2015-36507.2High

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

23.7%