NVD

Id
24395  
Name
CVE-2015-2336  
Description
TPView.dll in VMware Workstation 10.x before 10.0.6 and 11.x before 11.1.1, VMware Player 6.x before 6.0.6 and 7.x before 7.1.1, and VMware Horizon Client 3.2.x before 3.2.1, 3.3.x, and 5.x local-mode before 5.4.2 on Windows does not properly allocate memory, which allows guest OS users to execute arbitrary code on the host OS via unspecified vectors, a different vulnerability than CVE-2012-0897.  
Reject
 
CVSS Version
2  
CVSS Score
5.8  
Severity
Medium  
CVSS Base Score
5.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
6.5  
CVSS Vector
(AV:A/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2015-06-13  
Modified Date
2016-12-30  
Seq
2015-2336  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
129121 24395 CVE-2015-2336 75095  View
129122 24395 CVE-2015-2336 1032529  View
129123 24395 CVE-2015-2336 1032530  View
129124 24395 CVE-2015-2336 http://www.vmware.com/security/advisories/VMSA-2015-0004.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
7774 JVNDB-2015-003094 複数の VMware 製品の TPView.dll におけるホスト OS 上で任意のコードを実行される脆弱性 VMware Workstation、VMware Player および VMware Horizon Client for Windows の TPView.dll は、メモリの割り当てを適切に行わないため、ホスト OS 上で任意のコードを実行される脆弱性が存在します。 CVE-2015-2336 79561 CVE-2015-2336 24395 5.8 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-003094.html 2015-06-09 2015-06-16 View