Several critical security vulnerabilities have been addressed in the newest releases of VMware's hosted product line

a. Host to guest shared folder HGFS traversal vulnerabilityOn Windows hosts, if you have configured a VMware host to guest shared folder HGFS, it is possible for a program running in the guest to gain access to the host's file system and create or modify executable files in sensitive locations...

VMSA-2008-0005:Several CRITICAL security vulnerabilities have been addressed in the newest releases of VMware's hosted product line

VMSA-2008-0005.1 Several critical security vulnerabilities have been addressed in the newest releases of VMware's hosted product line VMware Security Advisory VMware Security AdvisoryAdvisory ID: VMSA-2008-0005.1 VMware Security AdvisorySynopsis: Several critical security vulnerabilities have bee...

CVE-2008-0923

Directory traversal vulnerability in the Shared Folders feature for VMWare ACE 1.0.2 and 2.0.2, Player 1.0.4 and 2.0.2, and Workstation 5.5.4 and 6.0.2 allows guest OS users to read and write arbitrary files on the host OS via a multibyte string that produces a wide character string containing...

CVE-2008-0923

Directory traversal vulnerability in the Shared Folders feature for VMWare ACE 1.0.2 and 2.0.2, Player 1.0.4 and 2.0.2, and Workstation 5.5.4 and 6.0.2 allows guest OS users to read and write arbitrary files on the host OS via a multibyte string that produces a wide character string containing...

CVE-2008-0923

CVE-2008-0923 is a directory traversal vulnerability in VMware’s Shared Folders feature (HGFS) that affects desktop products including VMware Workstation up to 6.0.2, Workstation 5.5.4, VMware Player 2.0.2 and 1.0.4, and VMware ACE 2.0.2 and 1.0.2 . The root cause is a mismatch between input vali...

CVE-2008-0923

Directory traversal vulnerability in the Shared Folders feature for VMWare ACE 1.0.2 and 2.0.2, Player 1.0.4 and 2.0.2, and Workstation 5.5.4 and 6.0.2 allows guest OS users to read and write arbitrary files on the host OS via a multibyte string that produces a wide character string containing...

Core Security Technologies Advisory 2007.0930

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs Path Traversal vulnerability in VMware's shared folders implementation Advisory Information Title: Path Traversal vulnerability in VMware's shared folders implementati...

KLA10079 ACE vulnerability in Aurigma Image Uploader

A buffer overflow vulnerability was found in the Aurigma Image Uploader ActiveX control. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited from the network at a point related to unknown applications via specially designed properties...

KLA10407 ACE vulnerability in Yahoo! Music Jukebox

Buffer overflows were found in Yahoo! Music Jukebox. By exploiting these vulnerabilities malicious users can execute arbitrary code. This vulnerability can be exploited remotely via specially designed arguments to different methods. Original advisories - Exploitation Public exploits exist for thi...

KLA10253 ACE vulnerability in MPlayer

An array index error was found in MPlayer. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed MOV file. Original advisories - Related products MPlayer CVE list CVE-2008-0485 critical Solution Update to...

KLA10260 ACE vulnerability in McAfeeE-Buisness Server

An unspecified vulnerability was found in McAfee E-Business. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited remotely via a specially designed auth packet. Original advisories - Exploitation Public exploits exist for this...

KLA10341 ACE vulnerability in St. Bernard Open File Manager

A buffer overflow was found in St. Bernard Open File Manager. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed request. Original advisories - Related products St-Bernard-Open-File-Manager CVE list...

Sql injection

SQL injection vulnerability in albums.php in Ace Image Hosting Script allows remote authenticated users to execute arbitrary SQL commands via the id parameter in editalbum mode...

CVE-2007-6393

SQL injection vulnerability in albums.php in Ace Image Hosting Script allows remote authenticated users to execute arbitrary SQL commands via the id parameter in editalbum mode...

CVE-2007-6393

SQL injection vulnerability in albums.php in Ace Image Hosting Script allows remote authenticated users to execute arbitrary SQL commands via the id parameter in editalbum mode...

CVE-2007-6393

CVE-2007-6393 describes an SQL injection in the Ace Image Hosting Script, in albums.php, via the id parameter in editalbum mode. The vulnerability allows remote authenticated users to execute arbitrary SQL commands. Impact indicators in the source data show partial impact to confidentiality, inte...

KLA10107 ACE vulnerability in Cisco Security Agent

A buffer overflow was found in Cisco Security Agent. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed SMB packet. Original advisories Cisco bulletin Related products Cisco-Security-Agent-CSA/ CVE lis...

Ace Image Hosting Script (id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================ Ace Image Hosting Script id Remote SQL Injection Vulnerability ================================================================...

KLA10335 ACE vulnerability in SonicWall Global VPN client

Format string vulnerabilities were found in the SonicWall Global VPN client. By exploiting these vulnerabilities malicious users can execute arbitrary code. These vulnerabilities can be exploited remotely via specially designed format strings. Original advisories - Related products...

KLA10257 Vulnerability in Macrovision SafeDisc

A buffer overflow was found in Macrovision SafeDisc. By exploiting this vulnerability malicious users can overwrite arbitrary memory locations and gain privileges. This vulnerability can be exploited locally via a specially designed argument. Original advisories - Related products...