CVE-2015-1043

The Host Guest File System (HGFS) in VMware Workstation 10.x before 10.0.5, VMware Player 6.x before 6.0.5, and VMware Fusion 6.x before 6.0.5 and 7.x before 7.0.1 allows guest OS users to cause a guest OS denial of service via unspecified vectors.

• CWE-20

• http://secunia.com/advisories/62551
• http://www.securityfocus.com/bid/72337Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1031644Third Party Advisory, VDB Entry
• http://www.vmware.com/security/advisories/VMSA-2015-0001.htmlPatch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/100934
• http://secunia.com/advisories/62551
• http://www.securityfocus.com/bid/72337Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1031644Third Party Advisory, VDB Entry
• http://www.vmware.com/security/advisories/VMSA-2015-0001.htmlPatch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/100934

Published

Jan 29, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-1032Cross-site scripting (XSS) vulnerability in Kiwix before 0.9…
• CVE-2015-1038p7zip 9.20.1 allows remote attackers to write to arbitrary f…
• CVE-2015-1039Cross-site scripting (XSS) vulnerability in user/login.phtml…
• CVE-2015-1040Multiple cross-site scripting (XSS) vulnerabilities in the a…
• CVE-2015-1041Cross-site scripting (XSS) vulnerability in e107_admin/filem…
• CVE-2015-1042The string_sanitize_url function in core/string_api.php in M…
• CVE-2015-1044vmware-authd (aka the Authorization process) in VMware Works…
• CVE-2015-1045Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2015-1046Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2015-1047vpxd in VMware vCenter Server 5.0 before u3e, 5.1 before u3,…
• CVE-2015-1048Open redirect vulnerability in the integrated web server on …
• CVE-2015-1049The web server on Siemens SCALANCE X-200IRT switches with fi…