CVE-2004-2515: High severity VMware Workstation vulnerability
Format string vulnerability in VMware Workstation 4.5.2 build-8848, if running with elevated privileges, might allow local users to execute arbitrary code via format string specifiers in command line arguments. NOTE: it is not clear if there are any default or typical circumstances under which VMware would be running with privileges beyond those already available to the attackers, so this might not be a vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2004-2515?
CVE-2004-2515 has a moderate severity due to its potential for local privilege escalation and arbitrary code execution.
How do I fix CVE-2004-2515?
To fix CVE-2004-2515, upgrade to a patched version of VMware Workstation that addresses the format string vulnerability.
Who is affected by CVE-2004-2515?
Users of VMware Workstation 4.5.2 build-8848 running with elevated privileges are affected by CVE-2004-2515.
What type of vulnerability is CVE-2004-2515?
CVE-2004-2515 is a format string vulnerability that allows local users to execute arbitrary code.
Can CVE-2004-2515 be exploited remotely?
No, CVE-2004-2515 requires local access to exploit the vulnerability.