1. Home
  2. CVE Database
  3. CVE-2014-1209
HIGH · 9.3

CVE-2014-1209

VMware vSphere Client 4.0, 4.1, 5.0 before Update 3, and 5.1 before Update 2 does not properly validate updates to Client files, which allows remote attackers to trigger the downloading and execution ...

Vulnerability Description

VMware vSphere Client 4.0, 4.1, 5.0 before Update 3, and 5.1 before Update 2 does not properly validate updates to Client files, which allows remote attackers to trigger the downloading and execution of an arbitrary program via unspecified vectors.

CVSS Score

9.3

HIGH

AV:N/AC:M/Au:N/C:C/I:C/A:C
Confidentiality
COMPLETE
Integrity
COMPLETE
Availability
COMPLETE

Affected Products

VendorProductVersions
VmwareVsphere Client4.0

Related Weaknesses (CWE)

CWE-20

References

FAQ

What is CVE-2014-1209?

CVE-2014-1209 is a vulnerability with a CVSS score of 9.3 (HIGH). VMware vSphere Client 4.0, 4.1, 5.0 before Update 3, and 5.1 before Update 2 does not properly validate updates to Client files, which allows remote attackers to trigger the downloading and execution ...

How severe is CVE-2014-1209?

CVE-2014-1209 has been rated HIGH with a CVSS base score of 9.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2014-1209?

Check the references section above for vendor advisories and patch information. Affected products include: Vmware Vsphere Client.