Vulnerability in VMware Esx
CVE-2013-3519
lgtosync.sys in VMware Workstation 9.x before 9.0.3, VMware Player 5.x before 5.0.3, VMware Fusion 5.x before 5.0.4, VMware ESXi 4.0 through 5.1, and VMware ESX 4.0 and 4.1, when a 32-bit Windows guest OS is used, allows guest OS users to gain guest OS privileges via an application that performs a crafted memory allocation.
EPSS: 0.005 (41.3th percentile) — read the EPSS interpretation.
Affected products
- Vmware Esx — versions 4.0, 4.1
- Vmware Esxi — versions 4.0, 4.1, 5.0
- Vmware Fusion — versions 5.0, 5.0.1, 5.0.2
- Vmware Player — versions 5.0, 5.0.1, 5.0.2
- Vmware Workstation — versions 9.0, 9.0.1, 9.0.2
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)