CVE-2014-4199

Summary

vm-support 0.88 in VMware Tools, as distributed with VMware Workstation through 10.0.3 and other products, allows local users to write to arbitrary files via a symlink attack on a file in /tmp.

Impact & exploitability

AV:L/AC:M/Au:N/C:N/I:C/A:C

Affected products we track (1)

Recommendation

Apply the vendor fix in your normal patch cycle. Open any affected product above for its exact safe version.

Additional information

• NVD record
• http://www.osvdb.org/110458
• http://www.securitytracker.com/id/1030758
• https://exchange.xforce.ibmcloud.com/vulnerabilities/95493
• http://seclists.org/fulldisclosure/2014/Aug/71Exploit