Lucene search
HistoryAug 28, 2014 - 3:14 p.m.
CVE-2014-4200
4.7 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:M/Au:N/C:C/I:N/A:N
5.8 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
vm-support 0.88 in VMware Tools, as distributed with VMware Workstation through 10.0.3 and other products, uses 0644 permissions for the vm-support archive, which allows local users to obtain sensitive information by extracting files from this archive.
Affected configurations
Node
vmwaretools
ORvmwarevm-supportMatch0.88
ORvmwareworkstationRange≤10.0.3
ORvmwareworkstationMatch10.0
ORvmwareworkstationMatch10.0.1
ORvmwareworkstationMatch10.0.2
Related
cvelist
cvelist
CVE-2014-4200
2014-08-28 15:00:00
prion
prion
Code injection
2014-08-28 15:14:00
cve
cve
CVE-2014-4200
2014-08-28 15:14:09
debiancve
debiancve
CVE-2014-4200
2014-08-28 15:14:09
packetstorm
packetstorm
vm-support 0.88 File Overwrite / Information Disclosure
2014-08-26 00:00:00
4.7 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:M/Au:N/C:C/I:N/A:N
5.8 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
Related for NVD:CVE-2014-4200