CVE-2015-2336
Severity Score
5.8
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
TPView.dll in VMware Workstation 10.x before 10.0.6 and 11.x before 11.1.1, VMware Player 6.x before 6.0.6 and 7.x before 7.1.1, and VMware Horizon Client 3.2.x before 3.2.1, 3.3.x, and 5.x local-mode before 5.4.2 on Windows does not properly allocate memory, which allows guest OS users to execute arbitrary code on the host OS via unspecified vectors, a different vulnerability than CVE-2012-0897.
TPView.dll en VMware Workstation 10.x anterior a 10.0.6 y 11.x anterior a 11.1.1, VMware Player 6.x anterior a 6.0.6 y 7.x anterior a 7.1.1, y VMware Horizon Client 3.2.x anterior a 3.2.1, 3.3.x, y 5.x local-mode anterior a 5.4.2 en Windows no reserva correctamente memoria, lo que permite a usuarios del sistema operativo invitado ejecutar código arbitrario sobre el sistema operativo anfitrión a través de vectores no especificados, una vulnerabilidad diferente a CVE-2012-0897.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2015-03-18 CVE Reserved
- 2015-06-09 CVE Published
- 2024-08-06 CVE Updated
- 2024-08-27 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-399: Resource Management Errors
CAPEC
References (4)
| URL | Tag | Source |
|---|---|---|
| http://www.securityfocus.com/bid/75095 | Vdb Entry | |
| http://www.securitytracker.com/id/1032529 | Vdb Entry | |
| http://www.securitytracker.com/id/1032530 | Vdb Entry |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://www.vmware.com/security/advisories/VMSA-2015-0004.html | 2016-12-31 |
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Vmware Search vendor "Vmware" | Horizon Client Search vendor "Vmware" for product "Horizon Client" | 3.2.0 Search vendor "Vmware" for product "Horizon Client" and version "3.2.0" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Vmware Search vendor "Vmware" | Horizon Client Search vendor "Vmware" for product "Horizon Client" | 3.3 Search vendor "Vmware" for product "Horizon Client" and version "3.3" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Vmware Search vendor "Vmware" | Horizon View Client Search vendor "Vmware" for product "Horizon View Client" | 5.4 Search vendor "Vmware" for product "Horizon View Client" and version "5.4" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Vmware Search vendor "Vmware" | Horizon View Client Search vendor "Vmware" for product "Horizon View Client" | 5.4.1 Search vendor "Vmware" for product "Horizon View Client" and version "5.4.1" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Vmware Search vendor "Vmware" | Fusion Search vendor "Vmware" for product "Fusion" | 6.0 Search vendor "Vmware" for product "Fusion" and version "6.0" | - |
Affected
| ||||||
| Vmware Search vendor "Vmware" | Fusion Search vendor "Vmware" for product "Fusion" | 6.0.1 Search vendor "Vmware" for product "Fusion" and version "6.0.1" | - |
Affected
| ||||||
| Vmware Search vendor "Vmware" | Fusion Search vendor "Vmware" for product "Fusion" | 6.0.2 Search vendor "Vmware" for product "Fusion" and version "6.0.2" | - |
Affected
| ||||||
| Vmware Search vendor "Vmware" | Fusion Search vendor "Vmware" for product "Fusion" | 6.0.3 Search vendor "Vmware" for product "Fusion" and version "6.0.3" | - |
Affected
| ||||||
| Vmware Search vendor "Vmware" | Fusion Search vendor "Vmware" for product "Fusion" | 6.0.4 Search vendor "Vmware" for product "Fusion" and version "6.0.4" | - |
Affected
| ||||||
| Vmware Search vendor "Vmware" | Fusion Search vendor "Vmware" for product "Fusion" | 6.0.5 Search vendor "Vmware" for product "Fusion" and version "6.0.5" | - |
Affected
| ||||||
| Vmware Search vendor "Vmware" | Fusion Search vendor "Vmware" for product "Fusion" | 7.0 Search vendor "Vmware" for product "Fusion" and version "7.0" | - |
Affected
| ||||||
| Vmware Search vendor "Vmware" | Fusion Search vendor "Vmware" for product "Fusion" | 7.0.1 Search vendor "Vmware" for product "Fusion" and version "7.0.1" | - |
Affected
| ||||||
| Vmware Search vendor "Vmware" | Player Search vendor "Vmware" for product "Player" | 6.0 Search vendor "Vmware" for product "Player" and version "6.0" | - |
Affected
| ||||||
| Vmware Search vendor "Vmware" | Player Search vendor "Vmware" for product "Player" | 6.0.1 Search vendor "Vmware" for product "Player" and version "6.0.1" | - |
Affected
| ||||||
| Vmware Search vendor "Vmware" | Player Search vendor "Vmware" for product "Player" | 6.0.2 Search vendor "Vmware" for product "Player" and version "6.0.2" | - |
Affected
| ||||||
| Vmware Search vendor "Vmware" | Player Search vendor "Vmware" for product "Player" | 6.0.3 Search vendor "Vmware" for product "Player" and version "6.0.3" | - |
Affected
| ||||||
| Vmware Search vendor "Vmware" | Player Search vendor "Vmware" for product "Player" | 6.0.4 Search vendor "Vmware" for product "Player" and version "6.0.4" | - |
Affected
| ||||||
| Vmware Search vendor "Vmware" | Player Search vendor "Vmware" for product "Player" | 6.0.5 Search vendor "Vmware" for product "Player" and version "6.0.5" | - |
Affected
| ||||||
| Vmware Search vendor "Vmware" | Player Search vendor "Vmware" for product "Player" | 7.0 Search vendor "Vmware" for product "Player" and version "7.0" | - |
Affected
| ||||||
| Vmware Search vendor "Vmware" | Player Search vendor "Vmware" for product "Player" | 7.1 Search vendor "Vmware" for product "Player" and version "7.1" | - |
Affected
| ||||||
| Vmware Search vendor "Vmware" | Workstation Search vendor "Vmware" for product "Workstation" | 10.0 Search vendor "Vmware" for product "Workstation" and version "10.0" | - |
Affected
| ||||||
| Vmware Search vendor "Vmware" | Workstation Search vendor "Vmware" for product "Workstation" | 10.0.1 Search vendor "Vmware" for product "Workstation" and version "10.0.1" | - |
Affected
| ||||||
| Vmware Search vendor "Vmware" | Workstation Search vendor "Vmware" for product "Workstation" | 10.0.2 Search vendor "Vmware" for product "Workstation" and version "10.0.2" | - |
Affected
| ||||||
| Vmware Search vendor "Vmware" | Workstation Search vendor "Vmware" for product "Workstation" | 10.0.3 Search vendor "Vmware" for product "Workstation" and version "10.0.3" | - |
Affected
| ||||||
| Vmware Search vendor "Vmware" | Workstation Search vendor "Vmware" for product "Workstation" | 10.0.4 Search vendor "Vmware" for product "Workstation" and version "10.0.4" | - |
Affected
| ||||||
| Vmware Search vendor "Vmware" | Workstation Search vendor "Vmware" for product "Workstation" | 10.0.5 Search vendor "Vmware" for product "Workstation" and version "10.0.5" | - |
Affected
| ||||||
| Vmware Search vendor "Vmware" | Workstation Search vendor "Vmware" for product "Workstation" | 11.0 Search vendor "Vmware" for product "Workstation" and version "11.0" | - |
Affected
| ||||||
| Vmware Search vendor "Vmware" | Workstation Search vendor "Vmware" for product "Workstation" | 11.1 Search vendor "Vmware" for product "Workstation" and version "11.1" | - |
Affected
| ||||||