Unscored severity · published Jan 29, 2015
CVE-2014-8370
VMware Workstation 10.x before 10.0.5, VMware Player 6.x before 6.0.5, VMware Fusion 6.x before 6.0.5, and VMware ESXi 5.0 through 5.5 allow host OS users to gain host OS…
–
CVSS
4.2%
EPSS
No
On KEV
Description
VMware Workstation 10.x before 10.0.5, VMware Player 6.x before 6.0.5, VMware Fusion 6.x before 6.0.5, and VMware ESXi 5.0 through 5.5 allow host OS users to gain host OS privileges or cause a denial of service (arbitrary write to a file) by modifying a configuration file.
Exploitation
Is it being used?
Exploit prediction (EPSS)4.2% · higher than 91% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ES
ESXi · VMware
5.0; 5.0; 5.0; 5.1; 5.1; 5.5 · source: NVD
FU
Fusion · Vmware
6.0; 6.0.1; 6.0.2; 6.0.3; 6.0.4 · source: NVD
PL
Player · Vmware
6.0; 6.0.1; 6.0.2; 6.0.3; 6.0.4 · source: NVD
WO
Workstation · Vmware
10.0; 10.0.1; 10.0.2; 10.0.3; 10.0.4 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-8370
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-8370
Third Party Advisory
http://jvn.jp/en/jp/JVN88252465/index.html
Third Party Advisory
http://jvndb.jvn.jp/jvndb/JVNDB-2015-000007
secunia.com
http://secunia.com/advisories/62551
secunia.com
http://secunia.com/advisories/62605
secunia.com
http://secunia.com/advisories/62669
Third Party Advisory
http://www.securityfocus.com/bid/72338
More from ESXi
9.8
CVE-2020-3992
VMware ESXi OpenSLP Use-After-Free Vulnerability
9.8
CVE-2019-5544
VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability
8.2
CVE-2025-22225
VMware ESXi Arbitrary Write Vulnerability
8.2
CVE-2025-22224
VMware ESXi and Workstation TOCTOU Race Condition Vulnerability
7.8
CVE-2010-3904
Linux Kernel Improper Input Validation Vulnerability