CVE-2013-1406
Estado: ModificadaAlta (7.2)—
The Virtual Machine Communication Interface (VMCI) implementation in vmci.sys in VMware Workstation 8.x before 8.0.5 and 9.x before 9.0.1 on Windows, VMware Fusion 4.1 before 4.1.4 and 5.0 before 5.0.2, VMware View 4.x before 4.6.2 and 5.x before 5.1.2 on Windows, VMware ESXi 4.0 through 5.1, and VMware ESX 4.0 and 4.1 does not properly restrict memory allocation by control code, which allows local users to gain privileges via unspecified vectors.
CVSS
- Versión: 2.0
- Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
- Puntuación base: 7.2
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.97%
- Percentil entre todas las CVEs puntuadas: 61
- Fecha de la puntuación: 2/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (5)
CWE
- CWE-20
Referencias
- http://www.vmware.com/security/advisories/VMSA-2013-0002.html
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17164
- http://www.vmware.com/security/advisories/VMSA-2013-0002.html
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17164
JSON original (NVD)
Mostrar
{
"id": "CVE-2013-1406",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 7.2,
"accessVector": "LOCAL",
"vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
"authentication": "NONE",
"integrityImpact": "COMPLETE",
"accessComplexity": "LOW",
"availabilityImpact": "COMPLETE",
"confidentialityImpact": "COMPLETE"
},
"acInsufInfo": false,
"impactScore": 10,
"baseSeverity": "HIGH",
"obtainAllPrivilege": false,
"exploitabilityScore": 3.9,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2013-02-11T22:55:01.413",
"references": [
{
"url": "http://www.vmware.com/security/advisories/VMSA-2013-0002.html",
"tags": [
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17164",
"source": "cve@mitre.org"
},
{
"url": "http://www.vmware.com/security/advisories/VMSA-2013-0002.html",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17164",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-20"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "The Virtual Machine Communication Interface (VMCI) implementation in vmci.sys in VMware Workstation 8.x before 8.0.5 and 9.x before 9.0.1 on Windows, VMware Fusion 4.1 before 4.1.4 and 5.0 before 5.0.2, VMware View 4.x before 4.6.2 and 5.x before 5.1.2 on Windows, VMware ESXi 4.0 through 5.1, and VMware ESX 4.0 and 4.1 does not properly restrict memory allocation by control code, which allows local users to gain privileges via unspecified vectors."
},
{
"lang": "es",
"value": "La implementación en vmci.sys en el Virtual Machine Communication Interface (VMCI) en VMware Workstation v8.x anterior a v8.0.5 y v9.x anterior a v9.0.1 para Windows, VMware Fusion v4.1 anterior a v4.1.4 y 5.0 anterior a v5.0.2, VMware View v4.x anterior a v4.6.2 y v5.x anterior a v5.1.2 para Windows, VMware ESXi v4.0 a la v5.1, y VMware ESX v4.0 y v4.1, no restringe adecuadamente la asignación de memoria por control código, lo que permite a usuarios locales elevar sus privilegios a través de vectores no especificados."
}
],
"lastModified": "2026-06-16T23:51:22.700",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:vmware:workstation:8.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FCE22BB0-F375-4883-BF6C-5A6369694EF3"
},
{
"criteria": "cpe:2.3:a:vmware:workstation:8.0.0.18997:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "01483038-BC89-44BA-B07B-362FC5D7E8C1"
},
{
"criteria": "cpe:2.3:a:vmware:workstation:8.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AD913295-9302-425A-A9E1-B0DF76AD3069"
},
{
"criteria": "cpe:2.3:a:vmware:workstation:8.0.1.27038:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B671AC17-7064-4541-ADB3-FCD72109C766"
},
{
"criteria": "cpe:2.3:a:vmware:workstation:8.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "51B6CAE2-A396-40C8-8FF0-D9EC64D5C9A0"
},
{
"criteria": "cpe:2.3:a:vmware:workstation:8.0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "21644868-F1B0-4A8E-BE73-4F42BEB8E834"
},
{
"criteria": "cpe:2.3:a:vmware:workstation:8.0.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4944D9B1-A48B-4F32-951E-BEC3FEAC45FE"
},
{
"criteria": "cpe:2.3:a:vmware:workstation:9.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B439F706-27F8-4238-9396-B460EB78B6DC"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:vmware:fusion:4.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F74559CB-6E52-421F-88F3-739913C26C8E"
},
{
"criteria": "cpe:2.3:a:vmware:fusion:4.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4870DAA2-6670-47EF-BF74-6E39B92E75DB"
},
{
"criteria": "cpe:2.3:a:vmware:fusion:4.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "70C64B80-4928-4ABA-AF4E-1977C252BAEE"
},
{
"criteria": "cpe:2.3:a:vmware:fusion:4.1.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A8C8358B-4543-431C-B894-BD2CA04AD97C"
},
{
"criteria": "cpe:2.3:a:vmware:fusion:5.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4EEF165A-4E09-4FF0-A577-FF429BCCF588"
},
{
"criteria": "cpe:2.3:a:vmware:fusion:5.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FDC22BC2-DC74-4322-929C-7F82C083C1C7"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:vmware:view:4.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B7952E0E-6986-48BF-865C-189033AEB91E"
},
{
"criteria": "cpe:2.3:a:vmware:view:4.0.0:u2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9D0C4BA2-E018-4C74-B259-E0CE3109A864"
},
{
"criteria": "cpe:2.3:a:vmware:view:4.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4DE652F1-BC10-497D-A244-D893A148483D"
},
{
"criteria": "cpe:2.3:a:vmware:view:4.6.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4346ED63-851E-43E9-933D-7CCAFA43B17B"
},
{
"criteria": "cpe:2.3:a:vmware:view:4.6.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7373CD57-520C-46D9-9728-28E976AA87FA"
},
{
"criteria": "cpe:2.3:a:vmware:view:5.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "08133352-C2AE-4656-8A41-2D054F8DC820"
},
{
"criteria": "cpe:2.3:a:vmware:view:5.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C0B8E256-7371-4702-96AC-3A72A364D88A"
},
{
"criteria": "cpe:2.3:a:vmware:view:5.0.0:u2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B6E0DE85-7C49-4446-9407-1778F438806B"
},
{
"criteria": "cpe:2.3:a:vmware:view:5.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F21D6157-BB2F-4D13-871C-654287765ABC"
},
{
"criteria": "cpe:2.3:a:vmware:view:5.1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "45F2841C-51B4-49EA-B6F6-8C67525233A6"
},
{
"criteria": "cpe:2.3:a:vmware:view:5.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F1A41C1B-AD58-42DD-8975-3CD6F0A34C15"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:vmware:esxi:4.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "13771B15-CD71-472A-BE56-718B87D5825D"
},
{
"criteria": "cpe:2.3:o:vmware:esxi:4.0:1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0A4E41C0-31FA-47AA-A9BF-B9A6C1D44801"
},
{
"criteria": "cpe:2.3:o:vmware:esxi:4.0:2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AF016EE7-083A-4D62-A6D4-2807EB47B6DB"
},
{
"criteria": "cpe:2.3:o:vmware:esxi:4.0:3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8F11844A-3C6C-4AA5-87DC-979AFF62867A"
},
{
"criteria": "cpe:2.3:o:vmware:esxi:4.0:4:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AC463653-A599-45CF-8EA9-8854D5C59963"
},
{
"criteria": "cpe:2.3:o:vmware:esxi:4.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4BDE707D-A1F4-4829-843E-F6633BB84D6D"
},
{
"criteria": "cpe:2.3:o:vmware:esxi:4.1:1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4DC5C2BF-6EC6-436F-A925-469E87249C8A"
},
{
"criteria": "cpe:2.3:o:vmware:esxi:4.1:2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7BCE5DA9-BB88-4169-B77C-40B1F98D511A"
},
{
"criteria": "cpe:2.3:o:vmware:esxi:5.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E2331236-2E9B-4B52-81EE-B52DEB41ACE5"
},
{
"criteria": "cpe:2.3:o:vmware:esxi:5.0:1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7C5A1C2B-119E-49F3-B8E6-0610EE1C445C"
},
{
"criteria": "cpe:2.3:o:vmware:esxi:5.0:2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AF29B5A4-6E4C-4EAE-BC6A-0DD44262EE35"
},
{
"criteria": "cpe:2.3:o:vmware:esxi:5.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7217CBE1-3882-4045-A15C-EE7D4174CA00"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:vmware:esx:4.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BC337BB7-9A45-4406-A783-851F279130EE"
},
{
"criteria": "cpe:2.3:o:vmware:esx:4.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0B6BA46F-4E8C-4B2A-AE92-81B9F1B4D56C"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "cve@mitre.org"
}