CVE-2013-1406: Input Validation
The Virtual Machine Communication Interface (VMCI) implementation in vmci.sys in VMware Workstation 8.x before 8.0.5 and 9.x before 9.0.1 on Windows, VMware Fusion 4.1 before 4.1.4 and 5.0 before 5.0.2, VMware View 4.x before 4.6.2 and 5.x before 5.1.2 on Windows, VMware ESXi 4.0 through 5.1, and VMware ESX 4.0 and 4.1 does not properly restrict memory allocation by control code, which allows local users to gain privileges via unspecified vectors.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-1406?
CVE-2013-1406 has a medium severity rating, indicating a moderate risk of exploit.
How do I fix CVE-2013-1406?
To fix CVE-2013-1406, upgrade your VMware software to the latest versions that mitigate this vulnerability.
Which versions of VMware are affected by CVE-2013-1406?
CVE-2013-1406 affects VMware Workstation versions prior to 8.0.5, 9.0.1, VMware Fusion versions before 4.1.4 and 5.0.2, and multiple versions of VMware View and ESXi.
What is the impact of CVE-2013-1406?
The impact of CVE-2013-1406 could potentially allow a local user to execute arbitrary code on the host machine.
Is there a workaround for CVE-2013-1406?
There are no specific workarounds for CVE-2013-1406; updating to the latest version is the recommended approach.