CVE-2016-7086: High severity vmware workstation and esxi vulnerability
Published Dec 29, 2016
·Updated
The installer in VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows allows local users to gain privileges via a Trojan horse setup64.exe file in the installation directory.
Affected Software
9 affected components
VMware Workstation Player=12.0.0
VMware Workstation Player=12.0.1
VMware Workstation Player=12.1.0
VMware Workstation Player=12.1.1
VMware Workstation Pro=12.0.0
VMware Workstation Pro=12.0.1
VMware Workstation Pro=12.1.0
VMware Workstation Pro=12.1.1
Microsoft Windows
Event History
Dec 29, 2016
CVE Published
via MITRE·09:02 AM
Data Sourced
via MITRE·09:02 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-7086?
CVE-2016-7086 has a medium severity rating, indicating a moderate risk of exploitation.
2
How do I fix CVE-2016-7086?
To fix CVE-2016-7086, upgrade VMware Workstation Pro and Player to version 12.5.0 or later.
3
Who is affected by CVE-2016-7086?
CVE-2016-7086 affects local users who can manipulate the setup files of VMware Workstation Pro and Player versions 12.0.x and 12.1.x.
4
What does CVE-2016-7086 allow the attacker to do?
CVE-2016-7086 allows an attacker to gain elevated privileges by executing a Trojan horse setup64.exe file.
5
Are all versions of VMware Workstation affected by CVE-2016-7086?
No, only VMware Workstation Pro and Player versions 12.0.0 to 12.1.1 are affected by CVE-2016-7086.