CVE-2016-7079
published 2016-12-29CVE-2016-7079: The graphic acceleration functions in VMware Tools 9.x and 10.x before 10.0.9 on OS X allow local users to gain privileges or cause a denial of service (NULL…
PriorityP434high7.8CVSS 3.0
AVLACLPRLUINSUCHIHAH
EPSS
0.37%
28.8th percentile
The graphic acceleration functions in VMware Tools 9.x and 10.x before 10.0.9 on OS X allow local users to gain privileges or cause a denial of service (NULL pointer dereference) via unspecified vectors, a different vulnerability than CVE-2016-7080.
Affected
29 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| vmware | tools | <= 10.0.8 | — |
| vmware | tools | — | — |
| vmware | tools | — | — |
| vmware | tools | — | — |
| vmware | tools | — | — |
| vmware | tools | — | — |
| vmware | tools | — | — |
| vmware | tools | — | — |
| vmware | tools | — | — |
| vmware | tools | — | — |
| vmware | tools | — | — |
| vmware | tools | — | — |
| vmware | tools | — | — |
| vmware | tools | — | — |
| vmware | tools | — | — |
| vmware | tools | — | — |
| vmware | tools | — | — |
| vmware | tools | — | — |
| vmware | tools | — | — |
| vmware | tools | — | — |
| vmware | tools | — | — |
| vmware | tools | — | — |
| vmware | tools | — | — |
| vmware | vmware_esxi | — | — |
| vmware | vmware_fusion | — | — |
CVSS provenance
nvdv3.07.8HIGHCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvdv2.04.6MEDIUMAV:L/AC:L/Au:N/C:P/I:P/A:P
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-wxpj-3x4g-grwp: The graphic acceleration functions in VMware Tools 9
ghsa_unreviewed·2022-05-17·CVSS 7.8
CVE-2016-7079 [HIGH] CWE-476 GHSA-wxpj-3x4g-grwp: The graphic acceleration functions in VMware Tools 9
The graphic acceleration functions in VMware Tools 9.x and 10.x before 10.0.9 on OS X allow local users to gain privileges or cause a denial of service (NULL pointer dereference) via unspecified vectors, a different vulnerability than CVE-2016-7080.
GHSA
GHSA-cp2g-849g-w9jr: The graphic acceleration functions in VMware Tools 9
ghsa_unreviewed·2022-05-17·CVSS 7.8
CVE-2016-7080 [HIGH] CWE-476 GHSA-cp2g-849g-w9jr: The graphic acceleration functions in VMware Tools 9
The graphic acceleration functions in VMware Tools 9.x and 10.x before 10.0.9 on OS X allow local users to gain privileges or cause a denial of service (NULL pointer dereference) via unspecified vectors, a different vulnerability than CVE-2016-7079.
VMware
VMware ESXi, Workstation, Fusion, and Tools updates address multiple security issues
vendor_vmware·2016-09-13·CVSS 7.8
CVE-2016-7079 [HIGH] VMware ESXi, Workstation, Fusion, and Tools updates address multiple security issues
VMSA-2016-0014: VMware ESXi, Workstation, Fusion, and Tools updates address multiple security issues
a. VMware Workstation heap-based buffer overflow vulnerabilities via Cortado ThinPrint VMware Workstation contains vulnerabilities that may allow a Windows-based Virtual Machine (VM) to trigger a heap-based buffer overflow. Exploitation of these issues may lead to arbitrary code execution in VMware Workstation running on Windows. Exploitation is only possible if virtual printing has been enabled in VMware Workstation. This feature is not enabled by default. VMware Knowledge Base article 2146810 documents the procedure for enabling and disabling this feature. VMware would like to thank E0DB6391795D7F629B5077842E649393 working with Trend Micro's Zero Day Initiative for reporting this issue t
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2016-12-29
Published