CWE Code: 264
Vulnerability Type: privilege_escalation
CVSS Score: 6.9
CWE Name:  Permissions Privileges and Access Controls
Summary: the cpu hardware emulation in vmware workstation 6.0.5 and earlier and 5.5.8 and earlier; player 2.0.x through 2.0.5 and 1.0.x through 1.0.8; ace 2.0.x through 2.0.5 and earlier, and 1.0.x through 1.0.7; server 1.0.x through 1.0.7; esx 2.5.4 through 3.5; and esxi 3.5, when running 32-bit and 64-bit guest operating systems, does not properly handle the trap flag, which allows authenticated guest os users to gain privileges on the guest os.
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: LOCAL
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2008-11-10
Last Modified Date: 2018-11-02