VMware Player CVE-2013-1406 Input Validation Bypass Vulnerability

Description

VMware ESX, Workstation, Fusion, and View contain a vulnerability in the handling of control code in vmci.sys. A local malicious user may exploit this vulnerability to manipulate the memory allocation through the Virtual Machine Communication Interface (VMCI) code. This could result in a privilege escalation on Windows-based hosts and on Windows-based Guest Operating Systems.

Affected Applications

VMware Player

CVE References

Other References