CWE Code: 284
Vulnerability Type: privilege_escalation
CVSS Score: 7.2
CWE Name:  Improper Access Control
Summary: vmware-vmx.exe in vmware workstation 7.x through 10.x before 10.0.7 and 11.x before 11.1.1, vmware player 5.x and 6.x before 6.0.7 and 7.x before 7.1.1, and vmware horizon client 5.x local-mode before 5.4.2 on windows does not provide a valid dacl pointer during the setup of the vprintproxy.exe process, which allows host os users to gain host os privileges by injecting a thread.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: LOCAL
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2015-07-10
Last Modified Date: 2016-12-28