Test ID:	1.3.6.1.4.1.25623.1.0.810548
Category:	Privilege escalation
Title:	VMware Workstation Invalid DACL Privilege Escalation Vulnerability - Windows
Summary:	VMware Workstation is prone to a privilege escalation vulnerability.
Description:	Summary: VMware Workstation is prone to a privilege escalation vulnerability. Vulnerability Insight: The flaw is due to error in 'vmware-vmx.exe' which does not provide a valid DACL pointer during the setup of the vprintproxy.exe process. Vulnerability Impact: Successful exploitation will allow local attackers to gain escalated privileges on the host by injecting a thread. and execute code in the context of this process. Affected Software/OS: VMware Workstation version 10.x before 10.0.7 and 11.x before 11.1.1 before on Windows. Solution: Upgrade to VMware Workstation version 10.0.7 or 11.1.1 or later. CVSS Score: 7.2 CVSS Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2015-3650 https://www.nettitude.co.uk/vmware-multiple-products-privilege-escalation/ http://www.securitytracker.com/id/1032822 http://www.securitytracker.com/id/1032823
Copyright	Copyright (C) 2017 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.