Unscored severity · published Aug 28, 2014
CVE-2014-4199
vm-support 0.88 in VMware Tools, as distributed with VMware Workstation through 10.0.3 and other products, allows local users to write to arbitrary files via a symlink attack on a…
–
CVSS
0.4%
EPSS
No
On KEV
Description
vm-support 0.88 in VMware Tools, as distributed with VMware Workstation through 10.0.3 and other products, allows local users to write to arbitrary files via a symlink attack on a file in /tmp.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 37% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TO
Tools · Vmware
All versions, or not specified · source: NVD
VM
Vm-support · Vmware
0.88 · source: NVD
WO
Workstation · Vmware
through 10.0.3; 10.0; 10.0.1; 10.0.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-4199
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-4199
Exploit
http://seclists.org/fulldisclosure/2014/Aug/71
www.osvdb.org
http://www.osvdb.org/110458
www.securitytracker.com
http://www.securitytracker.com/id/1030758
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/95493
More from Tools
7.8
CVE-2025-41244
VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246)
3.9
CVE-2023-20867
VMware Tools Authentication Bypass Vulnerability
7.8
CVE-2023-34057
VMware Tools contains a local privilege escalation vulnerability. A malicious actor with local user access to a guest virtual machine may elevate privileges within the virtual…
7.8
CVE-2022-31676
VMware Tools (12.0.0, 11.x.y and 10.x.y) contains a local privilege escalation vulnerability
7.8
CVE-2021-21999
VMware Tools for Windows (11.x.y prior to 11.2.6), VMware Remote Console for Windows (12.x prior to 12.0.1) , VMware App Volumes (2.x prior to 2.18.10 and 4 prior to 2103) contain…