The host is installed with VMWare Workstation local privilege escalation vulnerability.

Successful exploitation will allow attacker to execute arbitrary code with elevated privileges, which may aid in other attacks. Impact Level: System/Application

Apply the patch or upgrade workstation 7.1.4 build 385536 For updates refer to http://www.vmware.com/products/ws/ ***** NOTE: Ignore this warning, if above mentioned workaround is manually applied. *****

The flaw is caused by an error in the 'vmrun' utility when handling library paths, which could be exploited to execute arbitrary code by tricking a user into running a vulnerable utility in a directory containing a specially crafted file.

VMware Workstation 6.5.x and 7.x before 7.1.4 build 385536 on Linux.

• http://packetstormsecurity.org/files/tags/advisory
• http://secunia.com/advisories/43885
• http://securitytracker.com/id?1025270
• http://www.vmware.com/security/advisories/VMSA-2011-0006.html
• http://www.vupen.com/english/advisories/2011/0816

---

Updated on 2015-03-25