NVD

Id
25305  
Name
CVE-2015-3650  
Description
vmware-vmx.exe in VMware Workstation 7.x through 10.x before 10.0.7 and 11.x before 11.1.1, VMware Player 5.x and 6.x before 6.0.7 and 7.x before 7.1.1, and VMware Horizon Client 5.x local-mode before 5.4.2 on Windows does not provide a valid DACL pointer during the setup of the vprintproxy.exe process, which allows host OS users to gain host OS privileges by injecting a thread.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2015-07-10  
Modified Date
2016-12-27  
Seq
2015-3650  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
133913 25305 CVE-2015-3650 1032822  View
133914 25305 CVE-2015-3650 1032823  View
133915 25305 CVE-2015-3650 http://www.vmware.com/security/advisories/VMSA-2015-0005.html  View
133916 25305 CVE-2015-3650 https://www.nettitude.co.uk/vmware-multiple-products-privilege-escalation/  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
8237 JVNDB-2015-003557 Windows 上で稼働する複数の VMware 製品の vmware-vmx.exe におけるホスト OS の権限を取得される脆弱性 Windows 上で稼働する VMware Workstation、VMware Player および VMware Horizon Client の vmware-vmx.exe は、vprintproxy.exe プロセスのセットアップの際に有効な DACL ポインタを提供しないため、ホスト OS の権限を取得される脆弱性が存在します。 CVE-2015-3650 80875 CVE-2015-3650 25305 7.2 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-003557.html 2015-07-09 2015-07-14 View