CVE-2014-2384

Name of the Vulnerable Software and Affected Versions VMware Workstation version 10.0.1 build 1379776 VMware Player version 6.0.1 build 1379776

Description The issue allows local users to cause a denial of service, resulting in a read access violation and system crash, via a crafted buffer in an IOCTL call. The vendor has rated this issue as non-exploitable.

Recommendations For VMware Workstation version 10.0.1 build 1379776, consider restricting access to the vmx86.sys driver to minimize the risk of exploitation. For VMware Player version 6.0.1 build 1379776, consider restricting access to the vmx86.sys driver to minimize the risk of exploitation.