CVE-2016-5330 Privilege escalation in n/a
Local attackers can gain privileges by placing a malicious DLL in the working directory, affecting VMware Tools users.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2016-5330?
CVE-2016-5330 is a high-severity vulnerability in Vmware Esxi, published on 8 Aug 2016. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
Untrusted search path vulnerability in the HGFS (aka Shared Folders) feature in VMware Tools 10.0.5 in VMware ESXi 5.0 through 6.0, VMware Workstation Pro 12.1.x before 12.1.1, VMware Workstation Player 12.1.x before 12.1.1, and VMware Fusion 8.1.x before 8.1.1 allows local users to gain privileges via a Trojan horse DLL in the current working directory.
Weakness: CWE-426
Which versions are affected by CVE-2016-5330?
It affects 5 products.
Products include Vmware Esxi, Vmware Fusion, Vmware Tools, Vmware Workstation Player, Vmware Workstation Pro.
How do I fix CVE-2016-5330?
No fix has been published for CVE-2016-5330 yet. Limit exposure of the affected software until one is available.
Is CVE-2016-5330 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2016-5330 exists.
Public exploit code: 1 Metasploit module and 1 Exploit-DB entry.
Other vulnerabilities in Vmware Esxi
Sources
Also known as GHSA-r9pr-hcq4-m3jp.