Privilege Escalation Vulnerability in VMware Workstation and Player Products

CVE-2015-3650

Summary

A vulnerability exists in VMware products where the application vmware-vmx.exe fails to assign a valid DACL pointer during the initialization of the vprintproxy.exe process. This flaw allows a local user on the host operating system to escalate their privileges and gain unauthorized access to the system. The issue affects multiple versions of VMware Workstation and Player, creating a potential security risk if not promptly addressed.

References