KLA11437 Multiple vulnerabilities in VMware products

Multiple vulnerabilities were found in VMware products. Malicious users can exploit these vulnerabilities to gain privileges.

Below is a complete list of vulnerabilities:

1. Vulnerability related to VMX process can be exploited remotely to gain privileges;
2. Vulnerability related to COM classes used by the VMX process can be exploited remotely to gain privileges.

Original advisories

VMSA-2019-0002

Related products

VMware-Workstation

VMware-Player

CVE list

CVE-2019-5511 high

CVE-2019-5512 high

Solution

Update to latest version

Download Workstation

Impacts

• PE

Privilege escalation. Exploitation of vulnerabilities with this impact can lead to performing by abuser actions, which are normally disallowed for current role.

Affected Products

• VMware Workstation Pro earlier than 14.1.6VMware Workstation Player earlier than 14.1.6VMware Workstation Pro earlier than 15.0.3VMware Workstation Player earlier than 15.0.3