First published: Sat Nov 16 2013(Updated: )
VMware Workstation 9.x before 9.0.3 and VMware Player 5.x before 5.0.3 on Linux do not properly handle shared libraries, which allows host OS users to gain host OS privileges via unspecified vectors.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
VMware Workstation and ESXi | =9.0 | |
VMware Workstation and ESXi | =9.0.1 | |
VMware Workstation and ESXi | =9.0.2 | |
VMware Player | =5.0 | |
VMware Player | =5.0.1 | |
VMware Player | =5.0.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2013-5972 is classified as a high severity vulnerability due to its potential to allow host OS users to gain unauthorized privileges.
To fix CVE-2013-5972, update VMware Workstation to version 9.0.3 or later and VMware Player to version 5.0.3 or later.
CVE-2013-5972 affects VMware Workstation 9.x prior to 9.0.3 and VMware Player 5.x prior to 5.0.3 on Linux.
CVE-2013-5972 can be exploited via unspecified vectors that allow host OS users to gain privileges, potentially leading to further attacks.
There is no known workaround for CVE-2013-5972, and upgrading to a patched version is recommended.