CVE-2014-4199

CVE-2014-4199 affects vm-support 0.88 in VMware Tools (distributed with VMware Workstation up to 10.0.3 and related products). The vulnerability arises from a symlink attack on a file in /tmp, allowing a local user to write to arbitrary files. The Open VM Tools/open-vm-tools references in OSV/Red...

CVE-2018-6969

CVE-2018-6969 affects VMware Tools 10.x and earlier (before 10.3.0). The vulnerability is an out-of-bounds read in the HGFS Shared Folders feature. Successful exploitation may lead to information disclosure or privilege escalation on the guest VM when Shared Folders is enabled. Public sources (VM...

CVE-2014-4200

CVE-2014-4200 concerns vm-support 0.88 in VMware Tools (distributed with VMware Workstation up to 10.0.3 and related products). The underlying issue is that the vm-support archive is created with 0644 permissions, allowing local users to extract sensitive files from the archive. The public detail...