CVE-2014-2384

Severity: medium (CVSS 4.9 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-04-15 · updated 2026-06-17
Weakness: CWE-399

Description

vmx86.sys in VMware Workstation 10.0.1 build 1379776 and VMware Player 6.0.1 build 1379776 on Windows might allow local users to cause a denial of service (read access violation and system crash) via a crafted buffer in an IOCTL call. NOTE: the researcher reports "Vendor rated issue as non-exploitable."

Affected products

VMware Player: 6.0.1_build_1379776
VMware Workstation: 10.0.1_build_1379776

References

http://seclists.org/fulldisclosure/2014/Apr/163
https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-2384/
http://seclists.org/fulldisclosure/2014/Apr/163
https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-2384/

Get alerted when CVE-2014-2384 or the next vulnerability affects your stack