CVE-2015-1043

The Host Guest File System (HGFS) in VMware Workstation 10.x before 10.0.5, VMware Player 6.x before 6.0.5, and VMware Fusion 6.x before 6.0.5 and 7.x before 7.0.1 allows guest OS users to cause a guest OS denial of service via unspecified vectors.

CVSS v2.0 3.3 LOW

3.3^/10

CVSS v2.0 : LOW

Vector : AV:A/AC:L/Au:N/C:N/I:N/A:P

Exploitability : 6.5 / Impact : 2.9

Access Vector ADJACENT_NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

References

Link	Resource
http://secunia.com/advisories/62551
http://www.securityfocus.com/bid/72337	Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1031644	Third Party Advisory VDB Entry
http://www.vmware.com/security/advisories/VMSA-2015-0001.html	Patch Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/100934

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:vmware:fusion:6.0:::::::*
	cpe:2.3:a:vmware:fusion:6.0.1:::::::*
	cpe:2.3:a:vmware:fusion:6.0.2:::::::*
	cpe:2.3:a:vmware:fusion:6.0.3:::::::*
	cpe:2.3:a:vmware:fusion:6.0.4:::::::*
	cpe:2.3:a:vmware:fusion:7.0:::::::*

Configuration 2 (hide)

OR	cpe:2.3:a:vmware:workstation:10.0:::::::*
	cpe:2.3:a:vmware:workstation:10.0.1:::::::*
	cpe:2.3:a:vmware:workstation:10.0.2:::::::*
	cpe:2.3:a:vmware:workstation:10.0.3:::::::*
	cpe:2.3:a:vmware:workstation:10.0.4:::::::*

Configuration 3 (hide)

OR	cpe:2.3:a:vmware:player:6.0:::::::*
	cpe:2.3:a:vmware:player:6.0.1:::::::*
	cpe:2.3:a:vmware:player:6.0.2:::::::*
	cpe:2.3:a:vmware:player:6.0.3:::::::*
	cpe:2.3:a:vmware:player:6.0.4:::::::*

History

No history.

Information

Published : 2015-01-29 18:59

Updated : 2024-02-04 18:35

NVD link : CVE-2015-1043

Mitre link : CVE-2015-1043

CVE.ORG link : CVE-2015-1043

JSON object : View

Products Affected

vmware

player
workstation
fusion

CWE

CWE-20

Improper Input Validation

{"id": "CVE-2015-1043", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 3.3, "accessVector": "ADJACENT_NETWORK", "vectorString": "AV:A/AC:L/Au:N/C:N/I:N/A:P", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 6.5, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2015-01-29T18:59:02.657", "references": [{"url": "http://secunia.com/advisories/62551", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/72337", "tags": ["Third Party Advisory", "VDB Entry"], "source": "cve@mitre.org"}, {"url": "http://www.securitytracker.com/id/1031644", "tags": ["Third Party Advisory", "VDB Entry"], "source": "cve@mitre.org"}, {"url": "http://www.vmware.com/security/advisories/VMSA-2015-0001.html", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/100934", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-20"}]}], "descriptions": [{"lang": "en", "value": "The Host Guest File System (HGFS) in VMware Workstation 10.x before 10.0.5, VMware Player 6.x before 6.0.5, and VMware Fusion 6.x before 6.0.5 and 7.x before 7.0.1 allows guest OS users to cause a guest OS denial of service via unspecified vectors."}, {"lang": "es", "value": "Host Guest File System (HGFS) en VMware Workstation 10.x anterior a 10.0.5, VMware Player 6.x anterior a 6.0.5, y VMware Fusion 6.x anterior a 6.0.5 y 7.x anterior a 7.0.1 permite a usuarios del sistema operativo invitado causar una denegaci\u00f3n de servicio del sistema operativo invitado a trav\u00e9s de vectores no especificados."}], "lastModified": "2017-09-08T01:29:47.013", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:vmware:fusion:6.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A4BF84FD-2666-48F4-AEA6-4F2B30AF95BF"}, {"criteria": "cpe:2.3:a:vmware:fusion:6.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "184E7883-BBAD-4687-881A-69F0A5341ACA"}, {"criteria": "cpe:2.3:a:vmware:fusion:6.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D2CFDBFB-3776-4615-AF3B-FCBD6840A95F"}, {"criteria": "cpe:2.3:a:vmware:fusion:6.0.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DA730B34-3F72-451D-9960-DF44821A001C"}, {"criteria": "cpe:2.3:a:vmware:fusion:6.0.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "67198AB1-95B1-4ECC-A4CE-E2EAE688E193"}, {"criteria": "cpe:2.3:a:vmware:fusion:7.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "92275180-52FC-48DE-947C-3AE1B87AF2C0"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:vmware:workstation:10.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8D0119B9-916C-4A98-8542-10FFC4F71C80"}, {"criteria": "cpe:2.3:a:vmware:workstation:10.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "35CA413B-AB24-4884-A052-2A30A0CA4E7D"}, {"criteria": "cpe:2.3:a:vmware:workstation:10.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D4B2275C-913F-43D9-8146-0B0CD737E485"}, {"criteria": "cpe:2.3:a:vmware:workstation:10.0.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "01512B1C-ABCF-4705-91E8-F51FE6397343"}, {"criteria": "cpe:2.3:a:vmware:workstation:10.0.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A74B9F8A-E336-4421-ADA8-D2640DD7E67E"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:vmware:player:6.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8BBDD49B-0083-4743-B4F8-6214FE8F4822"}, {"criteria": "cpe:2.3:a:vmware:player:6.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BEBFD3AF-D8A3-4599-AF42-B47C0A62AA39"}, {"criteria": "cpe:2.3:a:vmware:player:6.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "82AE914B-8688-4274-9D40-C3A166F112AE"}, {"criteria": "cpe:2.3:a:vmware:player:6.0.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "043541FC-C4F9-4E71-8373-E9022DCC62DA"}, {"criteria": "cpe:2.3:a:vmware:player:6.0.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "200179EA-B682-435D-948C-5B70B686D1AE"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}