CVE-2014-2384: Medium severity VMware Player vulnerability
vmx86.sys in VMware Workstation 10.0.1 build 1379776 and VMware Player 6.0.1 build 1379776 on Windows might allow local users to cause a denial of service (read access violation and system crash) via a crafted buffer in an IOCTL call. NOTE: the researcher reports "Vendor rated issue as non-exploitable."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-2384?
CVE-2014-2384 is rated as a high severity vulnerability due to its potential to cause a denial of service.
How do I fix CVE-2014-2384?
To fix CVE-2014-2384, users should upgrade to the latest version of VMware Workstation or VMware Player that addresses this vulnerability.
What systems are affected by CVE-2014-2384?
CVE-2014-2384 affects VMware Workstation 10.0.1 build 1379776 and VMware Player 6.0.1 build 1379776 on Windows.
Can CVE-2014-2384 be exploited remotely?
CVE-2014-2384 cannot be exploited remotely as it requires local access to the affected VMware software.
What is the impact of CVE-2014-2384?
The impact of CVE-2014-2384 includes potential system crashes and denial of service due to read access violations.