CVE-2014-3793

VMware Fusion 6.x < 6.0.3 - Denial of Service via Kernel NULL Pointer Dereference

Title source: llm

Description

VMware Tools in VMware Workstation 10.x before 10.0.2, VMware Player 6.x before 6.0.2, VMware Fusion 6.x before 6.0.3, and VMware ESXi 5.0 through 5.5, when a Windows 8.1 guest OS is used, allows guest OS users to gain guest OS privileges or cause a denial of service (kernel NULL pointer dereference and guest OS crash) via unspecified vectors.

References (6)

Core 6

Core References

Vendor Advisory x_refsource_confirm

http://www.vmware.com/security/advisories/VMSA-2014-0005.html

Exploit, Third Party Advisory x_refsource_misc

http://packetstormsecurity.com/files/126869/VMware-Security-Advisory-2014-0005.html

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id/1030310

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id/1030311

Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq

http://www.securityfocus.com/archive/1/532236/100/0/threaded

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/58894

Scores

EPSS 0.0019

EPSS Percentile 40.8%

Details

Status published

Products (10)

vmware/esxi 5.0 (3 CPE variants)

vmware/esxi 5.1 (2 CPE variants)

vmware/esxi 5.5

vmware/fusion 6.0

vmware/fusion 6.0.1

vmware/fusion 6.0.2

vmware/player 6.0

vmware/player 6.0.1

vmware/workstation 10.0

vmware/workstation 10.0.1

Published May 31, 2014

Tracked Since Feb 18, 2026