CVE-2016-5330

high-risk
Published 2016-08-08

Untrusted search path vulnerability in the HGFS (aka Shared Folders) feature in VMware Tools 10.0.5 in VMware ESXi 5.0 through 6.0, VMware Workstation Pro 12.1.x before 12.1.1, VMware Workstation Player 12.1.x before 12.1.1, and VMware Fusion 8.1.x before 8.1.1 allows local users to gain privileges via a Trojan horse DLL in the current working directory.

Do I need to act?

!
25.5% chance of exploitation in next 30 days
EPSS score — higher than 75% of all CVEs
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
!
1 public exploit available
41711
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
7
CVSS 7.8/10 High
LOCAL / LOW complexity

Affected Products (5)

Affected Vendors

Vmware

References (16)

Third Party Advisory http://www.rapid7.com/db/modules/exploit/windows/misc/vmhgfs_webdav_dll_sideload
Third Party Advisory http://www.securityfocus.com/archive/1/539131/100/0/threaded
Third Party Advisory http://www.securityfocus.com/bid/92323
Third Party Advisory http://www.securitytracker.com/id/1036544
Third Party Advisory http://www.securitytracker.com/id/1036545
Third Party Advisory http://www.securitytracker.com/id/1036619
Mitigation http://www.vmware.com/security/advisories/VMSA-2016-0010.html
Exploit https://securify.nl/advisory/SFY20151201/dll_side_loading_vulnerability_in_vmwar...
Third Party Advisory http://www.rapid7.com/db/modules/exploit/windows/misc/vmhgfs_webdav_dll_sideload
Third Party Advisory http://www.securityfocus.com/archive/1/539131/100/0/threaded
Third Party Advisory http://www.securityfocus.com/bid/92323
Third Party Advisory http://www.securitytracker.com/id/1036544
Third Party Advisory http://www.securitytracker.com/id/1036545
Third Party Advisory http://www.securitytracker.com/id/1036619
Mitigation http://www.vmware.com/security/advisories/VMSA-2016-0010.html
Exploit https://securify.nl/advisory/SFY20151201/dll_side_loading_vulnerability_in_vmwar...
58
/ 100
high-risk
Severity 24/34 · High
Exploitability 22/34 · High
Exposure 12/34 · Low