KLA10854 Privileges escalation vulnerabilities in VMware products

Untrusted search path vulnerability was found in VMware products. By exploiting this vulnerability malicious users can gain privileges. This vulnerability can be exploited locally via DLL hijack.

Technical details

This vulnerability related to HGFS (aka Shared Folders) feature.

Original advisories

VMware advisory

Related products

VMware-Workstation

VMware-Player

VMware-Fusion

CVE list

CVE-2016-5330 warning

Solution

Update to the latest version

VMware downloads page

Impacts

• PE

Privilege escalation. Exploitation of vulnerabilities with this impact can lead to performing by abuser actions, which are normally disallowed for current role.

Affected Products

• VMware Workstation 12.1 versions earlier than 12.1.1VMware Player 12.1 versions earlier than 12.1.1VMware Fusion 8.1 versions earlier than 8.1.1