First published: Wed May 18 2016(Updated: )
VMware Workstation 11.x before 11.1.3 and VMware Player 7.x before 7.1.3 on Windows incorrectly access an executable file, which allows host OS users to gain host OS privileges via unspecified vectors.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Microsoft Windows | ||
VMware Player | =7.0 | |
VMware Player | =7.1 | |
VMware Player | =7.1.1 | |
VMware Player | =7.1.2 | |
VMware Workstation | =11.0 | |
VMware Workstation | =11.1 | |
VMware Workstation | =11.1.1 | |
VMware Workstation | =11.1.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2016-2077 is classified as a high severity vulnerability due to the potential for host OS privilege escalation.
To fix CVE-2016-2077, upgrade VMware Workstation to version 11.1.3 or later and VMware Player to version 7.1.3 or later.
CVE-2016-2077 affects VMware Workstation versions prior to 11.1.3 and VMware Player versions prior to 7.1.3.
CVE-2016-2077 allows a host OS user to gain host OS privileges through unspecified vectors.
Yes, CVE-2016-2077 specifically affects VMware products running on Microsoft Windows.