KLA10854 Privileges escalation vulnerabilities in VMware products

Detect date:

08/07/2016

Severity:

Warning

Description:

Untrusted search path vulnerability was found in VMware products. By exploiting this vulnerability malicious users can gain privileges. This vulnerability can be exploited locally via DLL hijack.

Affected products:

VMware Workstation 12.1 versions earlier than 12.1.1
VMware Player 12.1 versions earlier than 12.1.1
VMware Fusion 8.1 versions earlier than 8.1.1

Solution:

Update to the latest version
VMware downloads page

Original advisories:

VMware advisory

Impacts:

PE

Related products:

VMware Workstation

CVE-IDS:

CVE-2016-53304.4Warning