CVE-2011-1126: VMware Vix API

Medium severity, CVSS 6.9. EPSS: 0.4% chance of exploitation in the next 30 days.

VMware vmrun, as used in VIX API 1.x before 1.10.3 and VMware Workstation 6.5.x and 7.x before 7.1.4 build 385536 on Linux, might allow local users to gain privileges via a Trojan horse shared library in an unspecified directory.

Affected products

• VMware Vix API: version 1.0 only; version 1.1 only; version 1.1.1 only; version 1.1.2 only; version 1.1.3 only; version 1.1.4 only; …
• VMware Workstation: version 6.5.0 only; version 6.5.1 only; version 6.5.2 only; version 6.5.3 only; version 6.5.4 only; version 6.5.5 only; …

Published 2011-04-04. Last modified 2026-06-16.