KLA10814 Privilege escalation vulnerability in VMware Player and Workstation

An improper file access was found in VMware products. By exploiting this vulnerability malicious users can gain privileges. This vulnerability can be exploited locally.

Original advisories

VMware advisory

Related products

VMware-Workstation

VMware-Player

CVE list

CVE-2016-2077 critical

Solution

Update to the latest version

VMware products download page

Impacts

• PE

Privilege escalation. Exploitation of vulnerabilities with this impact can lead to performing by abuser actions, which are normally disallowed for current role.

Affected Products

• VMware Workstation 11 versions earlier than 11.1.3VMware Player 7 versions earlier than 7.1.3