CVE-2014-1209: Input Validation
VMware vSphere Client 4.0, 4.1, 5.0 before Update 3, and 5.1 before Update 2 does not properly validate updates to Client files, which allows remote attackers to trigger the downloading and execution of an arbitrary program via unspecified vectors.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-1209?
CVE-2014-1209 has a critical severity rating due to its potential to allow remote attackers to execute arbitrary programs.
How do I fix CVE-2014-1209?
To fix CVE-2014-1209, update VMware vSphere Client to the latest version or apply the necessary patches as specified by VMware.
What are the affected versions in CVE-2014-1209?
The affected versions in CVE-2014-1209 include VMware vSphere Client 4.0, 4.1, 5.0 before Update 3, and 5.1 before Update 2.
What does CVE-2014-1209 exploit?
CVE-2014-1209 exploits a vulnerability in VMware vSphere Client that fails to properly validate updates to Client files.
Who can be affected by CVE-2014-1209?
Organizations using vulnerable versions of VMware vSphere Client may be affected by CVE-2014-1209 due to potential remote attacks.