CVE-2014-4199

vm-support 0.88 in VMware Tools, as distributed with VMware Workstation through 10.0.3 and other...

6.3 MediumFix available

vm-support 0.88 in VMware Tools, as distributed with VMware Workstation through 10.0.3 and other products, allows local users to write to arbitrary files via a symlink attack on a file in /tmp.

Exploit likelihood

0.43%Down 0.5 points since Feb 4, 2022

What each source reports

NVD Score used 6.3

vm-support 0.88 in VMware Tools, as distributed with VMware Workstation through 10.0.3 and other products, allows local users to write to arbitrary files via a symlink attack on a file in /tmp.

Record: CVE-2014-4199
CVSS 2.0: 6.3 MediumAV:L/AC:M/Au:N/C:N/I:C/A:C
Weakness: CWE-59
Updated: 2026-11-02

CVE List No score

vm-support 0.88 in VMware Tools, as distributed with VMware Workstation through 10.0.3 and other products, allows local users to write to arbitrary files via a symlink attack on a file in /tmp.

Record: CVE-2014-4199
Updated: 2026-11-02

EUVDEUVD-2014-4128 No score

vm-support 0.88 in VMware Tools, as distributed with VMware Workstation through 10.0.3 and other products, allows local users to write to arbitrary files via a symlink attack on a file in /tmp.

Record: EUVD-2014-4128
Updated: 2026-11-03

GitHub AdvisoriesGHSA-v55p-68fc-xxcv No score

vm-support 0.88 in VMware Tools, as distributed with VMware Workstation through 10.0.3 and other...

vm-support 0.88 in VMware Tools, as distributed with VMware Workstation through 10.0.3 and other products, allows local users to write to arbitrary files via a symlink attack on a file in /tmp.

Record: GHSA-v55p-68fc-xxcv
Weakness: CWE-59
Updated: 2026-11-02

OSV No score

vm-support 0.88 in VMware Tools, as distributed with VMware Workstation through 10.0.3 and other products, allows local users to write to arbitrary files via a symlink attack on a file in /tmp.

Record: CVE-2014-4199
Updated: 2026-11-02

OSVDEBIAN-CVE-2014-4199 No score

vm-support 0.88 in VMware Tools, as distributed with VMware Workstation through 10.0.3 and other products, allows local users to write to arbitrary files via a symlink attack on a file in /tmp.

Record: DEBIAN-CVE-2014-4199
Updated: 2026-11-02

OSVUBUNTU-CVE-2014-4199 No score

vm-support 0.88 in VMware Tools, as distributed with VMware Workstation through 10.0.3 and other products, allows local users to write to arbitrary files via a symlink attack on a file in /tmp.

Record: UBUNTU-CVE-2014-4199
Updated: 2026-11-02

OSVUSN-7714-1 No score

open-vm-tools vulnerabilities

Matthias Gerstner discovered that Open VM Tools incorrectly handled file descriptors when dropping privileges. A local attacker could possibly use this issue to hijack /dev/uinput and simulate user inputs. (CVE-2023-34059)

Dolev Farhi discovered that Open VM Tools incorrectly handled certain file permissions. A local attacker could possibly use this issue to setup a symlink attack and override files without authorization. (CVE-2014-4199)

Record: USN-7714-1
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`open-vm-tools` Debian:12	before 2:9.4.6-1770165-7	2:9.4.6-1770165-7
`open-vm-tools` Debian:13	before 2:9.4.6-1770165-7	2:9.4.6-1770165-7
`open-vm-tools` Debian:14	before 2:9.4.6-1770165-7	2:9.4.6-1770165-7
`open-vm-tools-debuginfo` Red Hat:enterprise_linux:7::client	before 0:9.10.2-4.el7	0:9.10.2-4.el7
`open-vm-tools-devel` Red Hat:enterprise_linux:7::client	before 0:9.10.2-4.el7	0:9.10.2-4.el7
`open-vm-tools` Red Hat:enterprise_linux:7::client	before 0:9.10.2-4.el7	0:9.10.2-4.el7
`open-vm-tools-desktop` Red Hat:enterprise_linux:7::client	before 0:9.10.2-4.el7	0:9.10.2-4.el7
`open-vm-tools-debuginfo` Red Hat:enterprise_linux:7::computenode	before 0:9.10.2-4.el7	0:9.10.2-4.el7
`open-vm-tools-desktop` Red Hat:enterprise_linux:7::computenode	before 0:9.10.2-4.el7	0:9.10.2-4.el7
`open-vm-tools-devel` Red Hat:enterprise_linux:7::computenode	before 0:9.10.2-4.el7	0:9.10.2-4.el7

Show 10 moreShow less

Affected packages
Package	Affected	Fixed
`open-vm-tools` Red Hat:enterprise_linux:7::computenode	before 0:9.10.2-4.el7	0:9.10.2-4.el7
`open-vm-tools-debuginfo` Red Hat:enterprise_linux:7::server	before 0:9.10.2-4.el7	0:9.10.2-4.el7
`open-vm-tools-devel` Red Hat:enterprise_linux:7::server	before 0:9.10.2-4.el7	0:9.10.2-4.el7
`open-vm-tools` Red Hat:enterprise_linux:7::server	before 0:9.10.2-4.el7	0:9.10.2-4.el7
`open-vm-tools-desktop` Red Hat:enterprise_linux:7::server	before 0:9.10.2-4.el7	0:9.10.2-4.el7
`open-vm-tools-debuginfo` Red Hat:enterprise_linux:7::workstation	before 0:9.10.2-4.el7	0:9.10.2-4.el7
`open-vm-tools-devel` Red Hat:enterprise_linux:7::workstation	before 0:9.10.2-4.el7	0:9.10.2-4.el7
`open-vm-tools` Red Hat:enterprise_linux:7::workstation	before 0:9.10.2-4.el7	0:9.10.2-4.el7
`open-vm-tools-desktop` Red Hat:enterprise_linux:7::workstation	before 0:9.10.2-4.el7	0:9.10.2-4.el7
`open-vm-tools` Ubuntu:Pro:14.04:LTS	before 2:9.4.0-1280544-5ubuntu6.4+esm1, plus listed versions 2013.09.16-1328054-0ubuntu12013.09.16-1328054-0ubuntu22013.09.16-1328054-0ubuntu42013.09.16-1328054-0ubuntu52013.09.16-1328054-0ubuntu6 Show 8 moreShow less 2:9.4.0-1280544-52:9.4.0-1280544-5ubuntu12:9.4.0-1280544-5ubuntu22:9.4.0-1280544-5ubuntu42:9.4.0-1280544-5ubuntu52:9.4.0-1280544-5ubuntu62:9.4.0-1280544-5ubuntu6.22:9.4.0-1280544-5ubuntu6.4	2:9.4.0-1280544-5ubuntu6.4+esm1

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2014-4199 is a medium vulnerability (CVSS 6.3) in Vmware Tools, published August 28, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.43%, the 37th percentile. Fixed in open-vm-tools 2:9.4.6-1770165-7.

References

Show 16 moreShow less