« Volver al listado

CVE-2014-3793

Estado: ModificadaMedia (5.8)—

VMware Tools in VMware Workstation 10.x before 10.0.2, VMware Player 6.x before 6.0.2, VMware Fusion 6.x before 6.0.3, and VMware ESXi 5.0 through 5.5, when a Windows 8.1 guest OS is used, allows guest OS users to gain guest OS privileges or cause a denial of service (kernel NULL pointer dereference and guest OS crash) via unspecified vectors.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (4)

Vmware — EsxiVmware — FusionVmware — PlayerVmware — Workstation

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2014-3793",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5.8,
          "accessVector": "ADJACENT_NETWORK",
          "vectorString": "AV:A/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 6.5,
        "obtainUserPrivilege": true,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2014-05-31T11:17:13.560",
  "references": [
    {
      "url": "http://packetstormsecurity.com/files/126869/VMware-Security-Advisory-2014-0005.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/58894",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/532236/100/0/threaded",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securitytracker.com/id/1030310",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securitytracker.com/id/1030311",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.vmware.com/security/advisories/VMSA-2014-0005.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://packetstormsecurity.com/files/126869/VMware-Security-Advisory-2014-0005.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/58894",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/532236/100/0/threaded",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id/1030310",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id/1030311",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vmware.com/security/advisories/VMSA-2014-0005.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "VMware Tools in VMware Workstation 10.x before 10.0.2, VMware Player 6.x before 6.0.2, VMware Fusion 6.x before 6.0.3, and VMware ESXi 5.0 through 5.5, when a Windows 8.1 guest OS is used, allows guest OS users to gain guest OS privileges or cause a denial of service (kernel NULL pointer dereference and guest OS crash) via unspecified vectors."
    },
    {
      "lang": "es",
      "value": "VMware Tools en VMware Workstation 10.x anterior a 10.0.2, VMware Player 6.x anterior a 6.0.2, VMware Fusion 6.x anterior a 6.0.3 y VMware ESXi 5.0 hasta 5.5, cuando un sistema operativo invitado de Windows 8.1 está utilizado, permite a usuarios del sistema operativo invitado ganar privilegios del sistema operativo invitado o causar una denegación de servicio (referencia a puntero nulo de kernel y caída del sistema operativo invitado) a través de vectores no especificados."
    }
  ],
  "lastModified": "2026-06-17T00:08:53.653",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:vmware:fusion:6.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A4BF84FD-2666-48F4-AEA6-4F2B30AF95BF"
            },
            {
              "criteria": "cpe:2.3:a:vmware:fusion:6.0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "184E7883-BBAD-4687-881A-69F0A5341ACA"
            },
            {
              "criteria": "cpe:2.3:a:vmware:fusion:6.0.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D2CFDBFB-3776-4615-AF3B-FCBD6840A95F"
            },
            {
              "criteria": "cpe:2.3:a:vmware:player:6.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8BBDD49B-0083-4743-B4F8-6214FE8F4822"
            },
            {
              "criteria": "cpe:2.3:a:vmware:player:6.0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BEBFD3AF-D8A3-4599-AF42-B47C0A62AA39"
            },
            {
              "criteria": "cpe:2.3:a:vmware:workstation:10.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8D0119B9-916C-4A98-8542-10FFC4F71C80"
            },
            {
              "criteria": "cpe:2.3:a:vmware:workstation:10.0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "35CA413B-AB24-4884-A052-2A30A0CA4E7D"
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:5.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E2331236-2E9B-4B52-81EE-B52DEB41ACE5"
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:5.0:1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7C5A1C2B-119E-49F3-B8E6-0610EE1C445C"
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:5.0:2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AF29B5A4-6E4C-4EAE-BC6A-0DD44262EE35"
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:5.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7217CBE1-3882-4045-A15C-EE7D4174CA00"
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:5.1:1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9A405802-D786-46F9-9E29-C727F9FD480A"
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:5.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "469D98A5-7B8B-41BE-94C6-D6EF25388007"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "evaluatorComment": "Per http://cwe.mitre.org/data/definitions/476.html\n\"CWE-476: NULL Pointer Dereference\"",
  "sourceIdentifier": "cve@mitre.org"
}