CVE-2016-7461
Estado: ModificadaAlta (8.8)—
The drag-and-drop (aka DnD) function in VMware Workstation Pro 12.x before 12.5.2 and VMware Workstation Player 12.x before 12.5.2 and VMware Fusion and Fusion Pro 8.x before 8.5.2 allows guest OS users to execute arbitrary code on the host OS or cause a denial of service (out-of-bounds memory access on the host OS) via unspecified vectors.
CVSS
- Versión: 3.0
- Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
- Puntuación base: 8.8
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.54%
- Percentil entre todas las CVEs puntuadas: 44
- Fecha de la puntuación: 3/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (4)
CWE
- CWE-119
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2016-7461",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 7.2,
"accessVector": "LOCAL",
"vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
"authentication": "NONE",
"integrityImpact": "COMPLETE",
"accessComplexity": "LOW",
"availabilityImpact": "COMPLETE",
"confidentialityImpact": "COMPLETE"
},
"acInsufInfo": false,
"impactScore": 10,
"baseSeverity": "HIGH",
"obtainAllPrivilege": false,
"exploitabilityScore": 3.9,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"cvssMetricV30": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "CHANGED",
"version": "3.0",
"baseScore": 8.8,
"attackVector": "LOCAL",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "LOW",
"confidentialityImpact": "HIGH"
},
"impactScore": 6,
"exploitabilityScore": 2
}
]
},
"affected": [
{
"source": "security@vmware.com",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2016-12-29T09:59:00.697",
"references": [
{
"url": "http://www.securityfocus.com/bid/94280",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "security@vmware.com"
},
{
"url": "http://www.securitytracker.com/id/1037282",
"source": "security@vmware.com"
},
{
"url": "http://www.vmware.com/security/advisories/VMSA-2016-0019.html",
"tags": [
"Mitigation",
"Vendor Advisory"
],
"source": "security@vmware.com"
},
{
"url": "http://www.securityfocus.com/bid/94280",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securitytracker.com/id/1037282",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.vmware.com/security/advisories/VMSA-2016-0019.html",
"tags": [
"Mitigation",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-119"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "The drag-and-drop (aka DnD) function in VMware Workstation Pro 12.x before 12.5.2 and VMware Workstation Player 12.x before 12.5.2 and VMware Fusion and Fusion Pro 8.x before 8.5.2 allows guest OS users to execute arbitrary code on the host OS or cause a denial of service (out-of-bounds memory access on the host OS) via unspecified vectors."
},
{
"lang": "es",
"value": "La función de arrastrar y soltar (también conocida como DnD) en VMware Workstation Pro 12.x en versiones anteriores a 12.5.2 y VMware Workstation Player 12.x en versiones anteriores a 12.5.2 y VMware Fusion y Fusion Pro 8.x en versiones anteriores a 8.5.2 permite a usuarios invitados de SO ejecutar código arbitrario en el SO anfitrión o provocar una denegación de servicio (acceso a memoria fuera de límites en el SO anfitrión) a través de vectores no especificados."
}
],
"lastModified": "2026-06-17T00:53:06.570",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:vmware:fusion:8.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "25BBD4C7-C851-4D40-B6DD-92873319CD28"
},
{
"criteria": "cpe:2.3:a:vmware:fusion:8.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "20453B9E-D3AD-403F-B1A5-FB3300FBB0C0"
},
{
"criteria": "cpe:2.3:a:vmware:fusion:8.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6759F732-8E65-49F7-B46C-B1E3F856B11D"
},
{
"criteria": "cpe:2.3:a:vmware:fusion:8.1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DDD345B3-810C-41D1-82CE-0CA0B4B1F5DF"
},
{
"criteria": "cpe:2.3:a:vmware:fusion:8.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D91C182F-A8D2-4ABF-B202-261056EF93D1"
},
{
"criteria": "cpe:2.3:a:vmware:fusion:8.5.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "768A4D3B-CC19-4A3A-91D5-9C974F7F0247"
},
{
"criteria": "cpe:2.3:a:vmware:fusion:8.5.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A0C5D443-A330-40DF-939B-10597147CE7A"
},
{
"criteria": "cpe:2.3:a:vmware:fusion_pro:8.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C5E09EA3-24E4-43A2-8AE7-6844A6F8F73A"
},
{
"criteria": "cpe:2.3:a:vmware:fusion_pro:8.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F62099A3-2331-4F1E-A994-D3CCE2B7171C"
},
{
"criteria": "cpe:2.3:a:vmware:fusion_pro:8.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "12BA4C61-5604-4354-BD84-CE275EFA8442"
},
{
"criteria": "cpe:2.3:a:vmware:fusion_pro:8.1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3C90A36A-1FA7-45BB-937E-F7A5FD0914A3"
},
{
"criteria": "cpe:2.3:a:vmware:fusion_pro:8.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C384CC3F-EC56-4AA5-835B-ECCCDE2EC17E"
},
{
"criteria": "cpe:2.3:a:vmware:fusion_pro:8.5.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "20A7D995-BB46-4464-9E82-D836EDE72DCB"
},
{
"criteria": "cpe:2.3:a:vmware:fusion_pro:8.5.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DEB7D35F-6BF1-4076-ABA3-B580CE69D922"
},
{
"criteria": "cpe:2.3:a:vmware:workstation_player:12.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8ABE47D4-506C-4132-829B-19A61ED35F4A"
},
{
"criteria": "cpe:2.3:a:vmware:workstation_player:12.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "67CDB0AC-25B6-4397-9784-386C81C37352"
},
{
"criteria": "cpe:2.3:a:vmware:workstation_player:12.1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C48608C8-B7A6-47DD-8C78-44EB2B0D6C0C"
},
{
"criteria": "cpe:2.3:a:vmware:workstation_player:12.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1787E49C-19A5-428D-9BEA-5500B3DD60F8"
},
{
"criteria": "cpe:2.3:a:vmware:workstation_player:12.5.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8E1D4E53-DEB3-4143-B619-4431DB47341F"
},
{
"criteria": "cpe:2.3:a:vmware:workstation_player:12.5.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C83B3D50-43FF-4034-9C75-F44939D60378"
},
{
"criteria": "cpe:2.3:a:vmware:workstation_pro:12.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E3E8337D-BC36-4910-A998-309D277D008C"
},
{
"criteria": "cpe:2.3:a:vmware:workstation_pro:12.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0E91FE31-B442-4EE3-A415-D635A5CCA6C2"
},
{
"criteria": "cpe:2.3:a:vmware:workstation_pro:12.1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C67B92FB-CE89-479D-97DF-237C77BF307B"
},
{
"criteria": "cpe:2.3:a:vmware:workstation_pro:12.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F44F5FBF-DD1D-41F8-A1EC-9720DBC89008"
},
{
"criteria": "cpe:2.3:a:vmware:workstation_pro:12.5.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B8A83855-1411-4CA8-A005-5AA58D1CB32A"
},
{
"criteria": "cpe:2.3:a:vmware:workstation_pro:12.5.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3516D484-83AF-470E-9E9A-AFE3BBE4F75D"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "security@vmware.com"
}