KLA10386 Multiple vulnerabilities in VMware

Detect date:

09/23/2010

Severity:

Critical

Description:

Multiple serious vulnerabilities have been found in VMware products. Malicious users can exploit these vulnerabilities to cause denial of service, inject arbitrary scripts, execute arbitrary code and obtain sensitive information. Below is a complete list of vulnerabilities

Affected products:

VMware Workstation verisons 7.1.1 and earlier
VMware Player versions 3.1.1 and earlier
VMware ACE Management Server versions 2.7.1 and earlier

Solution:

Update to latest version
VMWare Products

Original advisories:

VMware bulletin

Impacts:

ACE

Related products:

VMware Workstation

CVE-IDS:

CVE-2010-0434