CVE Catalog

CVE-2016-2077

Critical
Published: Translated: NVD NIST

Summary

VMware Workstation 11.x before 11.1.3 and VMware Player 7.x before 7.1.3 on Windows incorrectly access an executable file, allowing host OS users to gain host OS privileges.

Risk Assessment

This vulnerability may lead to unauthorized privilege escalation by users, posing a risk to the security of the entire host operating system.

Recommendation

It is recommended to update VMware Workstation to version 11.1.3 or later and VMware Player to version 7.1.3 or later to mitigate this vulnerability.

Original NVD description (English source)

VMware Workstation 11.x before 11.1.3 and VMware Player 7.x before 7.1.3 on Windows incorrectly access an executable file, which allows host OS users to gain host OS privileges via unspecified vectors.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS