ZDI-23-1589: VMware Workstation UHCI Uninitialized Variable Information Disclosure Vulnerability
This vulnerability allows local attackers to disclose sensitive information on affected installations of VMware Workstation. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.0. The following CVEs are assigned: CVE-2023-34044.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-23-1589?
The severity of ZDI-23-1589 is rated as high due to the potential for local attackers to disclose sensitive information.
How do I fix ZDI-23-1589?
To fix ZDI-23-1589, update VMware Workstation to the latest version that addresses this vulnerability.
Who is affected by ZDI-23-1589?
ZDI-23-1589 affects installations of VMware Workstation where an attacker can execute high-privileged code.
Can ZDI-23-1589 be exploited remotely?
No, ZDI-23-1589 requires local access and high-privileged code execution on the target guest system.
What consequences can arise from ZDI-23-1589?
Exploitation of ZDI-23-1589 can lead to unauthorized disclosure of sensitive information on the affected system.