CVE-2014-4200

Name of the Vulnerable Software and Affected Versions VMware Tools versions prior to the version that fixes the issue in VMware Workstation through 10.0.3

Description The issue allows local users to obtain sensitive information by extracting files from the vm-support archive due to the use of 0644 permissions.

Recommendations For versions prior to the fixed version, consider changing the permissions of the vm-support archive to prevent unauthorized access until a patch is available.