CVE-2013-3519

Published: Dec 4, 2013Modified: Apr 29, 2026

7.9

Vector

AV:A/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 5.5 / Impact: 10.0

Source: NVD

Description

lgtosync.sys in VMware Workstation 9.x before 9.0.3, VMware Player 5.x before 5.0.3, VMware Fusion 5.x before 5.0.4, VMware ESXi 4.0 through 5.1, and VMware ESX 4.0 and 4.1, when a 32-bit Windows guest OS is used, allows guest OS users to gain guest OS privileges via an application that performs a crafted memory allocation.

Affected (16)

Products: Vmware: Esxi, Workstation, Esx, Player, Fusion

5 products

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Vmware Esxi	Version 4.0
Vmware Esxi	Version 4.1
Vmware Esxi	Version 5.0
Vmware Esxi	Version 5.1

Configuration B

3 vulnerable

Vulnerable Software	Affected Versions
Vmware Workstation	Version 9.0.1
Vmware Workstation	Version 9.0.2
Vmware Workstation	Version 9.0

Configuration C

2 vulnerable

Vulnerable Software	Affected Versions
Vmware Esx	Version 4.0
Vmware Esx	Version 4.1

Configuration D

3 vulnerable

Vulnerable Software	Affected Versions
Vmware Player	Version 5.0.1
Vmware Player	Version 5.0.2
Vmware Player	Version 5.0

Configuration E

4 vulnerable

Vulnerable Software	Affected Versions
Vmware Fusion	Version 5.0.1
Vmware Fusion	Version 5.0.2
Vmware Fusion	Version 5.0.3
Vmware Fusion	Version 5.0

Related CWEs

References (2)

http://www.vmware.com/security/advisories/VMSA-2013-0014.html

Source: cve@mitre.org

Vendor Advisory

http://www.vmware.com/security/advisories/VMSA-2013-0014.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.