CWE Code: 20
Vulnerability Type: privilege_escalation
CVSS Score: 7.2
CWE Name:  Improper Input Validation
Summary: the vmware tools update functionality in vmware workstation 6.5.x before 6.5.5 build 328052 and 7.x before 7.1.2 build 301548; vmware player 2.5.x before 2.5.5 build 328052 and 3.1.x before 3.1.2 build 301548; vmware server 2.0.2; vmware fusion 2.x before 2.0.8 build 328035 and 3.1.x before 3.1.2 build 332101; vmware esxi 3.5, 4.0, and 4.1; and vmware esx 3.0.3, 3.5, 4.0, and 4.1 allows host os users to gain privileges on the guest os via unspecified vectors, related to a "command injection" issue.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: LOCAL
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2010-12-06
Last Modified Date: 2018-10-10