CVE-2016-5330: High severity vmware workstation and esxi vulnerability
Untrusted search path vulnerability in the HGFS (aka Shared Folders) feature in VMware Tools 10.0.5 in VMware ESXi 5.0 through 6.0, VMware Workstation Pro 12.1.x before 12.1.1, VMware Workstation Player 12.1.x before 12.1.1, and VMware Fusion 8.1.x before 8.1.1 allows local users to gain privileges via a Trojan horse DLL in the current working directory.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-5330?
The severity of CVE-2016-5330 is considered high due to its potential for privilege escalation.
How do I fix CVE-2016-5330?
To fix CVE-2016-5330, upgrade VMware Tools to version 10.3.22 or later, and ensure all affected VMware products are updated to the latest versions.
Which VMware products are affected by CVE-2016-5330?
CVE-2016-5330 affects VMware ESXi 5.0 to 6.0, VMware Workstation Pro 12.1.x before 12.1.1, VMware Workstation Player 12.1.x before 12.1.1, and VMware Fusion 8.1.x before 8.1.1.
Can local users exploit CVE-2016-5330?
Yes, local users can exploit CVE-2016-5330 to gain elevated privileges on the affected systems.
What is the nature of the vulnerability in CVE-2016-5330?
CVE-2016-5330 is an untrusted search path vulnerability in the HGFS feature of VMware Tools.