VMware Virtual Machine Communication Interface (VMCI) - vmci.sys

VMware Virtual Machine Communication Interface VMCI - vmci.sys / CVE-2013-1406 exploitation PoC by Artem Shishkin, Positive Research, Positive Technologies, 02-2013 / void stdcall FireShellDWORD dwSomeParam EscalatePrivilegeshProcessToElevate; // Equate the stack and quit the cycle ifndef AMD64 a...

VMware Virtual Machine Communication Interface (VMCI) - 'vmci.sys'

/ CVE-2013-1406 exploitation PoC by Artem Shishkin, Positive Research, Positive Technologies, 02-2013 / void stdcall FireShellDWORD dwSomeParam EscalatePrivilegeshProcessToElevate; // Equate the stack and quit the cycle ifndef AMD64 asm pop ebx pop edi push 0xFFFFFFF8 push 0xA010043 endif HANDLE...

VMSA-2013-0002 VMware ESX, Workstation, Fusion, and View VMCI privilege escalation vulnerability

The remote ESXi is missing one or more security related Updates from VMSA-2013-0002. OpenVAS Vulnerability Test $Id: gbVMSA-2013-0002.nasl 6086 2017-05-09 09:03:30Z teissa $ VMSA-2013-0002 VMware ESX, Workstation, Fusion, and View VMCI privilege escalation vulnerability Authors: Michael Meyer...

Design/Logic Flaw

Unspecified vulnerability in vmci.sys in the Virtual Machine Communication Interface VMCI in VMware Workstation 6.5.1 and earlier, VMware Player 2.5.1 and earlier, VMware ACE 2.5.1 and earlier, and VMware Server 2.0.x before 2.0.1 build 156745 allows local users to gain privileges via unknown...

CVE-2009-1147

CVE-2009-1147 affects VMware VMCI (vmci.sys) and enables privilege escalation on Windows-based hosts/guests. The issue is described in VMware’s VMSA-2009-0005 advisory and is linked to VMCI IOCTL handling that can be abused by a local user with admin rights to gain SYSTEM privileges. A remediatio...

PT-2008-05: VMware Multiple Products vmci.sys Privilege Escalation Vulnerability

Positive Technologies Research Team has discovered priviliege escalation vulnerabilities in VMware products. The IOCTL handler in vmci.sys does not properly validate buffer data associated with the Irp object, which allows local users with administrative priviligies to gain SYSTEM privilieges...