Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
VMware Workstation 6.5.x before 6.5.3 build 185404, VMware Player 2.5.x before 2.5.3 build 185404, VMware ACE 2.5.x before 2.5.3 build 185404, VMware Server 1.x before 1.0.10 build 203137 and 2.x before 2.0.2 build 203138, VMware Fusion 2.x before 2.0.6 build 196839, VMware ESXi 3.5 and 4.0, and VMware ESX 2.5.5, 3.0.3, 3.5, and 4.0, when Virtual-8086 mode is used, do not properly set the exception code upon a page fault (aka #PF) exception, which allows guest OS users to gain privileges on the guest OS by specifying a crafted value for the cs register.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
VMware PF异常本地权限提升漏洞
Vulnerability Description
VMWare是一款“虚拟PC”软件，允许在一台机器上同时运行两个或多个Windows、DOS、LINUX系统。 VMware 存在本地权限提升漏洞。当处理器出现#PF异常时，会向包含有标记的栈上Push一个异常代码，操作系统使用这个标记确定正确地操作阶段。其中的一个标记为U/S（user/supervisor），当处理器处于用户态时出现错误会设置这个标记。 在Virtual-8086模式中，当VMWare模拟far调用或far jmp指令时，错误的使用了管理访问push栈上的返回cs和ip，导致向gues
CVSS Information
N/A
Vulnerability Type
N/A