PT-2012-3321

Name of the Vulnerable Software and Affected Versions VMware ESXi versions 3.5 through 4.1 VMware ESX versions 3.5 through 4.1 Description The issue concerns improper implementation of port-based I/O operations, allowing guest OS users to gain guest OS privileges by overwriting memory locations i...

CVE-2012-1515: Undefined Security Weakness

VMware ESXi 3.5, 4.0, and 4.1 and ESX 3.5, 4.0, and 4.1 do not properly implement port-based I/O operations, which allows guest OS users to gain guest OS privileges by overwriting memory locations in a read-only memory block associated with the Virtual DOS Machine...

VMSA-2012-0006 VMware ESXi and ESX address several security issues

The remote ESXi is missing one or more security related Updates from VMSA-2012-0006. Summary VMware ESXi and ESX address several security issues. Relevant releases ESXi 4.1 without patch ESXi410-201101201-SG ESXi 4.0 without patch ESXi400-201203401-SG ESXi 3.5 without patch ESXe350-201203401-I-SG...

VMSA-2012-0006 : VMware Workstation, ESXi, and ESX address several security issues

a. VMware ROM Overwrite Privilege Escalation A flaw in the way port-based I/O is handled allows for modifying Read-Only Memory that belongs to the Virtual DOS Machine. Exploitation of this issue may lead to privilege escalation on Guest Operating Systems that run Windows 2000, Windows XP 32-bit,...

VMware ESXi and ESX address several security issues

a. VMware ROM Overwrite Privilege Escalation A flaw in the way port-based I/O is handled allows for modifying Read-Only Memory that belongs to the Virtual DOS Machine. Exploitation of this issue may lead to privilege escalation on Guest Operating Systems that run Windows 2000, Windows XP 32-bit,...

VMSA-2012-0006:VMware ESXi and ESX address several security issues

VMSA-2012-0006.2 VMware ESXi and ESX address several security issues VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2012-0006.2 VMware Security Advisory Synopsis: VMware ESXi and ESX address several security issues VMware Security Advisory Issue date: 2012-03-29 VMware Securi...

VMSA-20120005 VMware vCenter Server, Orchestrator, Update Manager, vShield, vSphere Client, ESXi and ESX address several security issues

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ----------------------------------------------------------------------- VMware Security Advisory Advisory ID: VMSA-2012-0005 Synopsis: VMware vCenter Server, Orchestrator, Update Manager, vShield, vSphere Client, ESXi and ESX address several security...

CVE-2012-1510

Buffer overflow in the WDDM display driver in VMware ESXi 4.0, 4.1, and 5.0; VMware ESX 4.0 and 4.1; and VMware View before 4.6.1 allows guest OS users to gain guest OS privileges via unspecified vectors...

Buffer overflow

Buffer overflow in the WDDM display driver in VMware ESXi 4.0, 4.1, and 5.0; VMware ESX 4.0 and 4.1; and VMware View before 4.6.1 allows guest OS users to gain guest OS privileges via unspecified vectors...

Null pointer dereference

The XPDM display driver in VMware ESXi 4.0, 4.1, and 5.0; VMware ESX 4.0 and 4.1; and VMware View before 4.6.1 allows guest OS users to gain guest OS privileges or cause a denial of service NULL pointer dereference via unspecified vectors...

CVE-2012-1510

Buffer overflow in the WDDM display driver in VMware ESXi 4.0, 4.1, and 5.0; VMware ESX 4.0 and 4.1; and VMware View before 4.6.1 allows guest OS users to gain guest OS privileges via unspecified vectors...

CVE-2012-1510

Buffer overflow in the WDDM display driver in VMware ESXi 4.0, 4.1, and 5.0; VMware ESX 4.0 and 4.1; and VMware View before 4.6.1 allows guest OS users to gain guest OS privileges via unspecified vectors...

CVE-2012-1508

CVE-2012-1508 affects the XPDM display driver in VMware products (ESXi/ESX 4.0–4.1 and 5.0; View prior to 4.6.1). The issue is a NULL pointer dereference in the XPDM/WDDM display stack that can allow guest-OS privilege escalation or cause a guest-OS denial of service via unspecified vectors. Conn...

CVE-2012-1510

CVE-2012-1510 refers to a buffer overflow in the VMware WDDM display driver affecting VMware ESXi/ESX (4.0, 4.1, 5.0) and VMware View prior to 4.6.1. Exploitation could allow a guest OS user to gain guest OS privileges via unspecified vectors. The connected advisories confirm the issue and map it...

PT-2012-3316

Name of the Vulnerable Software and Affected Versions VMware ESXi versions 4.0 through 5.0 VMware ESX versions 4.0 through 4.1 VMware View versions prior to 4.6.1 Description A buffer overflow issue exists in the WDDM display driver, allowing guest OS users to gain guest OS privileges via...

CVE-2012-1508: Undefined Security Weakness

The XPDM display driver in VMware ESXi 4.0, 4.1, and 5.0; VMware ESX 4.0 and 4.1; and VMware View before 4.6.1 allows guest OS users to gain guest OS privileges or cause a denial of service NULL pointer dereference via unspecified vectors...

CVE-2012-1510: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the WDDM display driver in VMware ESXi 4.0, 4.1, and 5.0; VMware ESX 4.0 and 4.1; and VMware View before 4.6.1 allows guest OS users to gain guest OS privileges via unspecified vectors...

PT-2012-1002

Name of the Vulnerable Software and Affected Versions VMware ESXi versions 4.0 through 5.0 VMware ESX versions 4.0 through 4.1 VMware View version prior to 4.6.1 Description The issue allows guest OS users to gain guest OS privileges or cause a denial of service via unspecified vectors, related t...

VMSA-2011-0004.3 VMware ESX/ESXi SLPD denial of service vulnerability and ESX third party updates for Service Console packages bind, pam, and rpm.

The remote ESXi is missing one or more security related Updates from VMSA-2011-0004.3. Summary Service Location Protocol daemon SLPD denial of service issue and ESX 4.0 Service Console OS COS updates for bind, pam, and rpm. Relevant releases VMware ESXi 4.1 without patch ESXi410-201101201-SG...

VMSA-2011-0012.3 VMware ESXi and ESX updates to third party libraries and ESX Service Console

The remote ESXi is missing one or more security related Updates from VMSA-2011-0012.3. Summary VMware ESXi and ESX updates to third party libraries and ESX Service Console address several security issues. Relevant releases ESXi 5.0 without patch ESXi500-201112401-SG. ESXi 4.1 without patch...