CVE-2014-4200: Medium severity VMware Tools vulnerability

Q: What is the severity of CVE-2014-4200?

CVE-2014-4200 has a medium severity rating due to its potential to expose sensitive information to local users.

Q: How do I fix CVE-2014-4200?

To fix CVE-2014-4200, update VMware Tools and VMware Workstation to the most recent versions.

Q: What does CVE-2014-4200 affect?

CVE-2014-4200 affects VMware Tools version 0.88 and VMware Workstation versions up to and including 10.0.3.

Q: What type of vulnerability is CVE-2014-4200?

CVE-2014-4200 is a local information disclosure vulnerability due to improper file permissions.

Q: Who is impacted by CVE-2014-4200?

Local users on systems with vulnerable versions of VMware Tools or VMware Workstation are impacted by CVE-2014-4200.

Published Aug 28, 2014

Updated

vm-support 0.88 in VMware Tools, as distributed with VMware Workstation through 10.0.3 and other products, uses 0644 permissions for the vm-support archive, which allows local users to obtain sensitive information by extracting files from this archive.

Affected Software

6 affected components

VMware Tools

VMware vm-support=0.88

VMware Workstation<=10.0.3

VMware Workstation=10.0

VMware Workstation=10.0.1

VMware Workstation=10.0.2

Event History

Aug 28, 2014

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2014-4200?

CVE-2014-4200 has a medium severity rating due to its potential to expose sensitive information to local users.

How do I fix CVE-2014-4200?

To fix CVE-2014-4200, update VMware Tools and VMware Workstation to the most recent versions.

What does CVE-2014-4200 affect?

CVE-2014-4200 affects VMware Tools version 0.88 and VMware Workstation versions up to and including 10.0.3.

What type of vulnerability is CVE-2014-4200?

CVE-2014-4200 is a local information disclosure vulnerability due to improper file permissions.

Who is impacted by CVE-2014-4200?