CVE-2013-3519: High severity vmware esxi and horizon daas vulnerability
lgtosync.sys in VMware Workstation 9.x before 9.0.3, VMware Player 5.x before 5.0.3, VMware Fusion 5.x before 5.0.4, VMware ESXi 4.0 through 5.1, and VMware ESX 4.0 and 4.1, when a 32-bit Windows guest OS is used, allows guest OS users to gain guest OS privileges via an application that performs a crafted memory allocation.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-3519?
CVE-2013-3519 has a severity rating of Medium, as it allows unprivileged users to gain privileges on the guest OS.
How do I fix CVE-2013-3519?
To fix CVE-2013-3519, update your VMware software to versions 9.0.3, 5.0.3, 5.0.4, or later for affected products.
Which VMware products are affected by CVE-2013-3519?
CVE-2013-3519 affects VMware Workstation 9.x and earlier, VMware Player 5.x and earlier, VMware Fusion 5.x and earlier, and several versions of VMware ESXi and ESX.
Can CVE-2013-3519 be exploited in a 64-bit guest OS?
No, CVE-2013-3519 specifically impacts 32-bit Windows guest OS environments.
What type of vulnerability is CVE-2013-3519 categorized as?
CVE-2013-3519 is categorized as a privilege escalation vulnerability.