CVE-2014-2384 in Workstation
Summary
vmx86.sys in VMware Workstation 10.0.1 build 1379776 and VMware Player 6.0.1 build 1379776 on Windows might allow local users to cause a denial of service (read access violation and system crash) via a crafted buffer in an IOCTL call. NOTE: the researcher reports "Vendor rated issue as non-exploitable."
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Reservation
03/13/2014
Disclosure
04/15/2014
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 13000 | VMware Workstation IOCTL vmx86.sys resource management | 399 | Proof-of-Concept | Unavailable | CVE-2014-2384 |