Multiple VMware Products CVE-2018-6974 Local Heap-Based Buffer Overflow Vulnerability
BID:105660
CVE-2018-6974 |Info
Multiple VMware Products CVE-2018-6974 Local Heap-Based Buffer Overflow Vulnerability
| Bugtraq ID: | 105660 |
| Class: | Unknown |
| CVE: |
CVE-2018-6974 |
| Remote: | No |
| Local: | Yes |
| Published: | Oct 16 2018 12:00AM |
| Updated: | Oct 16 2018 12:00AM |
| Credit: | Anonymous working with Trend Micro's Zero Day Initiative |
| Vulnerable: |
VMWare Workstation 14.1.1 VMWare Workstation 14.1 VMWare Workstation 14.1.2 VMWare Workstation 14.0 VMWare Fusion 10.1.2 VMWare Fusion 10.1.1 VMWare Fusion 10.1 VMWare Fusion 10.0 VMWare Esxi 6.7 VMWare Esxi 6.5 VMWare Esxi 6.0 |
| Not Vulnerable: |
VMWare Workstation 14.1.3 VMWare Fusion 10.1.3 VMWare Esxi ESXi670-201810101-SG VMWare Esxi ESXi650-201808401-BG VMWare Esxi ESXi600-201808401-BG |
Discussion
Multiple VMware Products CVE-2018-6974 Local Heap-Based Buffer Overflow Vulnerability
Multiple VMware products are prone to a local heap-based buffer-overflow vulnerability.
An attacker can leverage this issue to execute arbitrary code in the context of the host. Failed exploit attempts will likely result in denial-of-service conditions.
Multiple VMware products are prone to a local heap-based buffer-overflow vulnerability.
An attacker can leverage this issue to execute arbitrary code in the context of the host. Failed exploit attempts will likely result in denial-of-service conditions.