Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Format string vulnerability in vmrun in VMware VIX API 1.6.x, VMware Workstation 6.5.x before 6.5.4 build 246459, VMware Player 2.5.x before 2.5.4 build 246459, and VMware Server 2.x on Linux, and VMware Fusion 2.x before 2.0.7 build 246742, allows local users to gain privileges via format string specifiers in process metadata.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
VMware vmrun格式化字符串漏洞
Vulnerability Description
VMWare是一款虚拟PC软件,允许在一台机器上同时运行两个或多个Windows、DOS、LINUX系统。 VMware VIX API, Vmware工作站,Vmware播放器 ,Linux下Vmware服务器 和VMware Fusion 中的vmrun存在格式化字符串漏洞。本地用户在进程元数据中通过格式化字符串限定符获取权限。
CVSS Information
N/A
Vulnerability Type
N/A