Unscored severity · published Aug 24, 2013
CVE-2013-1662
vmware-mount in VMware Workstation 8.x and 9.x and VMware Player 4.x and 5.x, on systems based on Debian GNU/Linux, allows host OS users to gain host OS privileges via a crafted…
–
CVSS
4.6%
EPSS
No
On KEV
Description
vmware-mount in VMware Workstation 8.x and 9.x and VMware Player 4.x and 5.x, on systems based on Debian GNU/Linux, allows host OS users to gain host OS privileges via a crafted lsb_release binary in a directory in the PATH, related to use of the popen library function.
Exploitation
Is it being used?
Exploit prediction (EPSS)4.6% · higher than 92% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PL
Player · Vmware
4.0; 4.0.0.18997; 4.0.1; 4.0.2; 4.0.3; 4.0.4; +5 more · source: NVD
WO
Workstation · Vmware
8.0; 8.0.0.18997; 8.0.1; 8.0.1.27038; 8.0.2; 8.0.3; +6 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-1662
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-1662
blog.cmpxchg8b.com
http://blog.cmpxchg8b.com/2013/08/security-debianisms.html
Vendor Advisory
http://www.vmware.com/security/advisories/VMSA-2013-0010.html
More from Player
9.8
CVE-2016-2077
VMware Workstation 11.x before 11.1.3 and VMware Player 7.x before 7.1.3 on Windows incorrectly access an executable file, which allows host OS users to gain host OS privileges…
9.8
CVE-2010-1205
Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in progressive applications, might allow remote attackers to execute arbitrary code via a PNG…
6.5
CVE-2010-2249
Memory leak in pngrutil.c in libpng before 1.2.44, and 1.4.x before 1.4.3, allows remote attackers to cause a denial of service (memory consumption and application crash) via a…
6.3
CVE-2015-6933
The VMware Tools HGFS (aka Shared Folders) implementation in VMware Workstation 11.x before 11.1.2, VMware Player 7.x before 7.1.2, VMware Fusion 7.x before 7.1.2, and VMware ESXi…
5.5
CVE-2006-3547
EMC VMware Player allows user-assisted attackers to cause a denial of service (unrecoverable application failure) via a long value of the ide1:0.fileName parameter in the .vmx…