Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2013-1406

Опубликовано: 11 фев. 2013
Источник: nvd
CVSS2: 7.2
EPSS Низкий

Описание

The Virtual Machine Communication Interface (VMCI) implementation in vmci.sys in VMware Workstation 8.x before 8.0.5 and 9.x before 9.0.1 on Windows, VMware Fusion 4.1 before 4.1.4 and 5.0 before 5.0.2, VMware View 4.x before 4.6.2 and 5.x before 5.1.2 on Windows, VMware ESXi 4.0 through 5.1, and VMware ESX 4.0 and 4.1 does not properly restrict memory allocation by control code, which allows local users to gain privileges via unspecified vectors.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:a:vmware:workstation:8.0:*:*:*:*:*:*:*
cpe:2.3:a:vmware:workstation:8.0.0.18997:*:*:*:*:*:*:*
cpe:2.3:a:vmware:workstation:8.0.1:*:*:*:*:*:*:*
cpe:2.3:a:vmware:workstation:8.0.1.27038:*:*:*:*:*:*:*
cpe:2.3:a:vmware:workstation:8.0.2:*:*:*:*:*:*:*
cpe:2.3:a:vmware:workstation:8.0.3:*:*:*:*:*:*:*
cpe:2.3:a:vmware:workstation:8.0.4:*:*:*:*:*:*:*
cpe:2.3:a:vmware:workstation:9.0:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
Конфигурация 2

Одно из

cpe:2.3:a:vmware:fusion:4.1:*:*:*:*:*:*:*
cpe:2.3:a:vmware:fusion:4.1.1:*:*:*:*:*:*:*
cpe:2.3:a:vmware:fusion:4.1.2:*:*:*:*:*:*:*
cpe:2.3:a:vmware:fusion:4.1.3:*:*:*:*:*:*:*
cpe:2.3:a:vmware:fusion:5.0:*:*:*:*:*:*:*
cpe:2.3:a:vmware:fusion:5.0.1:*:*:*:*:*:*:*
Конфигурация 3

Одновременно

Одно из

cpe:2.3:a:vmware:view:4.0.0:*:*:*:*:*:*:*
cpe:2.3:a:vmware:view:4.0.0:u2:*:*:*:*:*:*
cpe:2.3:a:vmware:view:4.5:*:*:*:*:*:*:*
cpe:2.3:a:vmware:view:4.6.0:*:*:*:*:*:*:*
cpe:2.3:a:vmware:view:4.6.1:*:*:*:*:*:*:*
cpe:2.3:a:vmware:view:5.0:*:*:*:*:*:*:*
cpe:2.3:a:vmware:view:5.0.0:*:*:*:*:*:*:*
cpe:2.3:a:vmware:view:5.0.0:u2:*:*:*:*:*:*
cpe:2.3:a:vmware:view:5.0.1:*:*:*:*:*:*:*
cpe:2.3:a:vmware:view:5.1.0:*:*:*:*:*:*:*
cpe:2.3:a:vmware:view:5.1.1:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
Конфигурация 4

Одно из

cpe:2.3:o:vmware:esxi:4.0:*:*:*:*:*:*:*
cpe:2.3:o:vmware:esxi:4.0:1:*:*:*:*:*:*
cpe:2.3:o:vmware:esxi:4.0:2:*:*:*:*:*:*
cpe:2.3:o:vmware:esxi:4.0:3:*:*:*:*:*:*
cpe:2.3:o:vmware:esxi:4.0:4:*:*:*:*:*:*
cpe:2.3:o:vmware:esxi:4.1:*:*:*:*:*:*:*
cpe:2.3:o:vmware:esxi:4.1:1:*:*:*:*:*:*
cpe:2.3:o:vmware:esxi:4.1:2:*:*:*:*:*:*
cpe:2.3:o:vmware:esxi:5.0:*:*:*:*:*:*:*
cpe:2.3:o:vmware:esxi:5.0:1:*:*:*:*:*:*
cpe:2.3:o:vmware:esxi:5.0:2:*:*:*:*:*:*
cpe:2.3:o:vmware:esxi:5.1:*:*:*:*:*:*:*
Конфигурация 5

Одно из

cpe:2.3:o:vmware:esx:4.0:*:*:*:*:*:*:*
cpe:2.3:o:vmware:esx:4.1:*:*:*:*:*:*:*

EPSS

Процентиль: 73%
0.00743
Низкий

7.2 High

CVSS2

Дефекты

CWE-20

Связанные уязвимости

github логотип

GHSA-hqcr-m2wp-rwvf

github
больше 3 лет назад

The Virtual Machine Communication Interface (VMCI) implementation in vmci.sys in VMware Workstation 8.x before 8.0.5 and 9.x before 9.0.1 on Windows, VMware Fusion 4.1 before 4.1.4 and 5.0 before 5.0.2, VMware View 4.x before 4.6.2 and 5.x before 5.1.2 on Windows, VMware ESXi 4.0 through 5.1, and VMware ESX 4.0 and 4.1 does not properly restrict memory allocation by control code, which allows local users to gain privileges via unspecified vectors.

EPSS

Процентиль: 73%
0.00743
Низкий

7.2 High

CVSS2

Дефекты

CWE-20