KLA11370 ACE vulnerability in VMware Workstation and Fusion

Integer overflow vulnerability was found in VMware Workstation and Fusion. Malicious users can exploit this vulnerability to execute arbitrary code.

Original advisories

VMSA-2018-0030

Related products

VMware-Workstation

VMware-Fusion

CVE list

CVE-2018-6983 high

Solution

Update to the latest version

VMware Fusion

Impacts

• ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

Affected Products

• VMware Workstation 14.x earlier than 14.1.5VMware Fusion 10.x earlier than 10.1.5VMware Workstation 15.x earlier than 15.0.2VMware Fusion 11.x earlier than 11.0.2