Details of VAR-201407-0700

ID

VAR-201407-0700

TITLE

Parallels Tools Local Privilege Escalation Vulnerability

Trust: 0.6

sources: CNVD: CNVD-2014-04743

DESCRIPTION

Parallels Tools is a set of virtual machine tools of Parallels Corporation in the United States. A local elevation of privilege vulnerability exists in Parallels Tools. An attacker could use this vulnerability to execute arbitrary code in the context of an affected application with local access. Vulnerabilities exist in Parallels Tools version 9.0, other versions may also be affected

Trust: 1.35

sources: CNVD: CNVD-2014-04743 // CNNVD: CNNVD-201407-711 // BID: 68941

IOT TAXONOMY

category:

['ICS']

sub_category:

Trust: 0.6

sources: CNVD: CNVD-2014-04743

AFFECTED PRODUCTS

vendor:

parallels

model:

tools

scope:

version:

9.0

Trust: 0.9

sources: CNVD: CNVD-2014-04743 // BID: 68941

CVSS

SEVERITY

CVSSV2

CVSSV3

CNVD:	CNVD-2014-04743
value:	HIGH
Trust: 0.6

CNVD:	CNVD-2014-04743
severity:	HIGH
baseScore:	7.2
vectorString:	AV:L/AC:L/AU:N/C:C/I:C/A:C
accessVector:	LOCAL
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	3.9
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.6

sources: CNVD: CNVD-2014-04743

THREAT TYPE

local

Trust: 0.9

sources: BID: 68941 // CNNVD: CNNVD-201407-711

TYPE

permissions and access control

Trust: 0.6

sources: CNNVD: CNNVD-201407-711

EXTERNAL IDS

db:	BID	id:	68941	Trust: 1.5
db:	CNVD	id:	CNVD-2014-04743	Trust: 0.6
db:	CNNVD	id:	CNNVD-201407-711	Trust: 0.6

sources: CNVD: CNVD-2014-04743 // BID: 68941 // CNNVD: CNNVD-201407-711

REFERENCES

url:	http://www.securityfocus.com/bid/68941	Trust: 1.2
url:	http://www.parallels.com/	Trust: 0.3

sources: CNVD: CNVD-2014-04743 // BID: 68941 // CNNVD: CNNVD-201407-711

CREDITS

Anastasios Monachos

Trust: 0.9

sources: BID: 68941 // CNNVD: CNNVD-201407-711

SOURCES

db:	CNVD	id:	CNVD-2014-04743
db:	BID	id:	68941
db:	CNNVD	id:	CNNVD-201407-711

LAST UPDATE DATE

2022-05-17T02:03:21.277000+00:00

SOURCES UPDATE DATE

db:	CNVD	id:	CNVD-2014-04743	date:	2014-08-01T00:00:00
db:	BID	id:	68941	date:	2014-07-28T00:00:00
db:	CNNVD	id:	CNNVD-201407-711	date:	2014-07-31T00:00:00

SOURCES RELEASE DATE

db:	CNVD	id:	CNVD-2014-04743	date:	2014-08-01T00:00:00
db:	BID	id:	68941	date:	2014-07-28T00:00:00
db:	CNNVD	id:	CNNVD-201407-711	date:	2014-07-31T00:00:00