CVE-2013-1406
VMware Virtual Machine Communication Interface (VMCI) - 'vmci.sys'
Severity Score
7.2
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
1
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
The Virtual Machine Communication Interface (VMCI) implementation in vmci.sys in VMware Workstation 8.x before 8.0.5 and 9.x before 9.0.1 on Windows, VMware Fusion 4.1 before 4.1.4 and 5.0 before 5.0.2, VMware View 4.x before 4.6.2 and 5.x before 5.1.2 on Windows, VMware ESXi 4.0 through 5.1, and VMware ESX 4.0 and 4.1 does not properly restrict memory allocation by control code, which allows local users to gain privileges via unspecified vectors.
La implementación en vmci.sys en el Virtual Machine Communication Interface (VMCI) en VMware Workstation v8.x anterior a v8.0.5 y v9.x anterior a v9.0.1 para Windows, VMware Fusion v4.1 anterior a v4.1.4 y 5.0 anterior a v5.0.2, VMware View v4.x anterior a v4.6.2 y v5.x anterior a v5.1.2 para Windows, VMware ESXi v4.0 a la v5.1, y VMware ESX v4.0 y v4.1, no restringe adecuadamente la asignación de memoria por control código, lo que permite a usuarios locales elevar sus privilegios a través de vectores no especificados.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2013-01-19 CVE Reserved
- 2013-02-11 CVE Published
- 2013-03-06 First Exploit
- 2023-03-08 EPSS Updated
- 2024-08-06 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-20: Improper Input Validation
CAPEC
References (3)
| URL | Tag | Source |
|---|---|---|
| https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17164 | Signature |
| URL | Date | SRC |
|---|---|---|
| https://www.exploit-db.com/exploits/40164 | 2013-03-06 |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://www.vmware.com/security/advisories/VMSA-2013-0002.html | 2017-09-19 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Vmware Search vendor "Vmware" | Workstation Search vendor "Vmware" for product "Workstation" | 8.0 Search vendor "Vmware" for product "Workstation" and version "8.0" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Vmware Search vendor "Vmware" | Workstation Search vendor "Vmware" for product "Workstation" | 8.0.0.18997 Search vendor "Vmware" for product "Workstation" and version "8.0.0.18997" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Vmware Search vendor "Vmware" | Workstation Search vendor "Vmware" for product "Workstation" | 8.0.1 Search vendor "Vmware" for product "Workstation" and version "8.0.1" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Vmware Search vendor "Vmware" | Workstation Search vendor "Vmware" for product "Workstation" | 8.0.1.27038 Search vendor "Vmware" for product "Workstation" and version "8.0.1.27038" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Vmware Search vendor "Vmware" | Workstation Search vendor "Vmware" for product "Workstation" | 8.0.2 Search vendor "Vmware" for product "Workstation" and version "8.0.2" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Vmware Search vendor "Vmware" | Workstation Search vendor "Vmware" for product "Workstation" | 8.0.3 Search vendor "Vmware" for product "Workstation" and version "8.0.3" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Vmware Search vendor "Vmware" | Workstation Search vendor "Vmware" for product "Workstation" | 8.0.4 Search vendor "Vmware" for product "Workstation" and version "8.0.4" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Vmware Search vendor "Vmware" | Workstation Search vendor "Vmware" for product "Workstation" | 9.0 Search vendor "Vmware" for product "Workstation" and version "9.0" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Vmware Search vendor "Vmware" | View Search vendor "Vmware" for product "View" | 4.0.0 Search vendor "Vmware" for product "View" and version "4.0.0" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Vmware Search vendor "Vmware" | View Search vendor "Vmware" for product "View" | 4.0.0 Search vendor "Vmware" for product "View" and version "4.0.0" | u2 |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Vmware Search vendor "Vmware" | View Search vendor "Vmware" for product "View" | 4.5 Search vendor "Vmware" for product "View" and version "4.5" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Vmware Search vendor "Vmware" | View Search vendor "Vmware" for product "View" | 4.6.0 Search vendor "Vmware" for product "View" and version "4.6.0" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Vmware Search vendor "Vmware" | View Search vendor "Vmware" for product "View" | 4.6.1 Search vendor "Vmware" for product "View" and version "4.6.1" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Vmware Search vendor "Vmware" | View Search vendor "Vmware" for product "View" | 5.0 Search vendor "Vmware" for product "View" and version "5.0" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Vmware Search vendor "Vmware" | View Search vendor "Vmware" for product "View" | 5.0.0 Search vendor "Vmware" for product "View" and version "5.0.0" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Vmware Search vendor "Vmware" | View Search vendor "Vmware" for product "View" | 5.0.0 Search vendor "Vmware" for product "View" and version "5.0.0" | u2 |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Vmware Search vendor "Vmware" | View Search vendor "Vmware" for product "View" | 5.0.1 Search vendor "Vmware" for product "View" and version "5.0.1" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Vmware Search vendor "Vmware" | View Search vendor "Vmware" for product "View" | 5.1.0 Search vendor "Vmware" for product "View" and version "5.1.0" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Vmware Search vendor "Vmware" | View Search vendor "Vmware" for product "View" | 5.1.1 Search vendor "Vmware" for product "View" and version "5.1.1" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Vmware Search vendor "Vmware" | Fusion Search vendor "Vmware" for product "Fusion" | 4.1 Search vendor "Vmware" for product "Fusion" and version "4.1" | - |
Affected
| ||||||
| Vmware Search vendor "Vmware" | Fusion Search vendor "Vmware" for product "Fusion" | 4.1.1 Search vendor "Vmware" for product "Fusion" and version "4.1.1" | - |
Affected
| ||||||
| Vmware Search vendor "Vmware" | Fusion Search vendor "Vmware" for product "Fusion" | 4.1.2 Search vendor "Vmware" for product "Fusion" and version "4.1.2" | - |
Affected
| ||||||
| Vmware Search vendor "Vmware" | Fusion Search vendor "Vmware" for product "Fusion" | 4.1.3 Search vendor "Vmware" for product "Fusion" and version "4.1.3" | - |
Affected
| ||||||
| Vmware Search vendor "Vmware" | Fusion Search vendor "Vmware" for product "Fusion" | 5.0 Search vendor "Vmware" for product "Fusion" and version "5.0" | - |
Affected
| ||||||
| Vmware Search vendor "Vmware" | Fusion Search vendor "Vmware" for product "Fusion" | 5.0.1 Search vendor "Vmware" for product "Fusion" and version "5.0.1" | - |
Affected
| ||||||
| Vmware Search vendor "Vmware" | Esxi Search vendor "Vmware" for product "Esxi" | 4.0 Search vendor "Vmware" for product "Esxi" and version "4.0" | - |
Affected
| ||||||
| Vmware Search vendor "Vmware" | Esxi Search vendor "Vmware" for product "Esxi" | 4.0 Search vendor "Vmware" for product "Esxi" and version "4.0" | 1 |
Affected
| ||||||
| Vmware Search vendor "Vmware" | Esxi Search vendor "Vmware" for product "Esxi" | 4.0 Search vendor "Vmware" for product "Esxi" and version "4.0" | 2 |
Affected
| ||||||
| Vmware Search vendor "Vmware" | Esxi Search vendor "Vmware" for product "Esxi" | 4.0 Search vendor "Vmware" for product "Esxi" and version "4.0" | 3 |
Affected
| ||||||
| Vmware Search vendor "Vmware" | Esxi Search vendor "Vmware" for product "Esxi" | 4.0 Search vendor "Vmware" for product "Esxi" and version "4.0" | 4 |
Affected
| ||||||
| Vmware Search vendor "Vmware" | Esxi Search vendor "Vmware" for product "Esxi" | 4.1 Search vendor "Vmware" for product "Esxi" and version "4.1" | - |
Affected
| ||||||
| Vmware Search vendor "Vmware" | Esxi Search vendor "Vmware" for product "Esxi" | 4.1 Search vendor "Vmware" for product "Esxi" and version "4.1" | 1 |
Affected
| ||||||
| Vmware Search vendor "Vmware" | Esxi Search vendor "Vmware" for product "Esxi" | 4.1 Search vendor "Vmware" for product "Esxi" and version "4.1" | 2 |
Affected
| ||||||
| Vmware Search vendor "Vmware" | Esxi Search vendor "Vmware" for product "Esxi" | 5.0 Search vendor "Vmware" for product "Esxi" and version "5.0" | - |
Affected
| ||||||
| Vmware Search vendor "Vmware" | Esxi Search vendor "Vmware" for product "Esxi" | 5.0 Search vendor "Vmware" for product "Esxi" and version "5.0" | 1 |
Affected
| ||||||
| Vmware Search vendor "Vmware" | Esxi Search vendor "Vmware" for product "Esxi" | 5.0 Search vendor "Vmware" for product "Esxi" and version "5.0" | 2 |
Affected
| ||||||
| Vmware Search vendor "Vmware" | Esxi Search vendor "Vmware" for product "Esxi" | 5.1 Search vendor "Vmware" for product "Esxi" and version "5.1" | - |
Affected
| ||||||
| Vmware Search vendor "Vmware" | Esx Search vendor "Vmware" for product "Esx" | 4.0 Search vendor "Vmware" for product "Esx" and version "4.0" | - |
Affected
| ||||||
| Vmware Search vendor "Vmware" | Esx Search vendor "Vmware" for product "Esx" | 4.1 Search vendor "Vmware" for product "Esx" and version "4.1" | - |
Affected
| ||||||