Unscored severity · published Apr 1, 2011
CVE-2011-1126
VMware vmrun, as used in VIX API 1.x before 1.10.3 and VMware Workstation 6.5.x and 7.x before 7.1.4 build 385536 on Linux, might allow local users to gain privileges via a Trojan…
–
CVSS
0.4%
EPSS
No
On KEV
Description
VMware vmrun, as used in VIX API 1.x before 1.10.3 and VMware Workstation 6.5.x and 7.x before 7.1.4 build 385536 on Linux, might allow local users to gain privileges via a Trojan horse shared library in an unspecified directory.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 32% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
VA
Vix Api · Vmware
1.0; 1.1; 1.1.1; 1.1.2; 1.1.3; 1.1.4; +7 more · source: NVD
WO
Workstation · Vmware
6.5.0; 6.5.1; 6.5.2; 6.5.3; 6.5.4; 6.5.5; +6 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-1126
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-1126
Vendor Advisory
http://lists.vmware.com/pipermail/security-announce/2011/000131.html
Vendor Advisory
http://secunia.com/advisories/43885
Vendor Advisory
http://secunia.com/advisories/43943
securityreason.com
http://securityreason.com/securityalert/8173
securitytracker.com
http://securitytracker.com/id?1025270
www.securityfocus.com
http://www.securityfocus.com/archive/1/517240/100/0/threaded
More from Vix Api
–
CVE-2010-1139
Format string vulnerability in vmrun in VMware VIX API 1.6.x, VMware Workstation 6.5.x before 6.5.4 build 246459, VMware Player 2.5.x before 2.5.4 build 246459, and VMware Server…