CVE-2016-2077 in Workstation

Summary

VMware Workstation 11.x before 11.1.3 and VMware Player 7.x before 7.1.3 on Windows incorrectly access an executable file, which allows host OS users to gain host OS privileges via unspecified vectors.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Reservation: 01/26/2016
• Disclosure: 05/18/2016
• Moderation: VulDB entry created
• Entries: 1: VDB-87541
• CPE: ready
• CWE: CWE-264 (Confirmed)
• CVSS: 8.5
• EPSS: 0.00552
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-2077
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-2077
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-2077/