CVE-2014-2384: VMware Player

Medium severity, CVSS 4.9. EPSS: 0.3% chance of exploitation in the next 30 days.

vmx86.sys in VMware Workstation 10.0.1 build 1379776 and VMware Player 6.0.1 build 1379776 on Windows might allow local users to cause a denial of service (read access violation and system crash) via a crafted buffer in an IOCTL call. NOTE: the researcher reports "Vendor rated issue as non-exploitable."

Affected products

• VMware Player: version 6.0.1_build_1379776 only
• VMware Workstation: version 10.0.1_build_1379776 only

Published 2014-04-15. Last modified 2026-06-17.