KLA12117 Use after free vulnerability in VMware Workstation and Player

A use after freevulnerability was found in VMware Workstation and Player. Malicious users can exploit this vulnerability to execute arbitrary code.

Original advisories

VMSA-2019-0009

Related products

VMware-Workstation

VMware-Player

CVE list

CVE-2019-5525 critical

Solution

Update to the latest version

Download VMWare Workstation

Impacts

• ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

Affected Products

• VMware Workstation 15.x earlier than 15.1.0VMware Player 15.x earlier than 15.1.0