KMPlayer 3.0.0.1440 Buffer Overflow

!/usr/bin/python The KMPlayer 3.0.0.1440 .mp3 Buffer Overflow Exploit XPSP3 DEP Bypass Downloaded from: http://download.cnet.com/The-KMPlayer/3000-136324-10659939.html 06 Jun 11 Cobbled together by dookie and ronin This exploit performs DEP bypass on WinXP SP3 with 2 different offsets. In our...

CVE-2011-2146

mount.vmhgfs in the VMware Host Guest File System HGFS in VMware Workstation 7.1.x before 7.1.4, VMware Player 3.1.x before 3.1.4, VMware Fusion 3.1.x before 3.1.3, VMware ESXi 3.5 through 4.1, and VMware ESX 3.0.3 through 4.1 allows guest OS users to determine the existence of host OS files and...

CVE-2011-1787

Race condition in mount.vmhgfs in the VMware Host Guest File System HGFS in VMware Workstation 7.1.x before 7.1.4, VMware Player 3.1.x before 3.1.4, VMware Fusion 3.1.x before 3.1.3, VMware ESXi 3.5 through 4.1, and VMware ESX 3.0.3 through 4.1 allows guest OS users to gain privileges on the gues...

Design/Logic Flaw

mount.vmhgfs in the VMware Host Guest File System HGFS in VMware Workstation 7.1.x before 7.1.4, VMware Player 3.1.x before 3.1.4, VMware Fusion 3.1.x before 3.1.3, VMware ESXi 3.5 through 4.1, and VMware ESX 3.0.3 through 4.1 allows guest OS users to determine the existence of host OS files and...

Design/Logic Flaw

mount.vmhgfs in the VMware Host Guest File System HGFS in VMware Workstation 7.1.x before 7.1.4, VMware Player 3.1.x before 3.1.4, VMware Fusion 3.1.x before 3.1.3, VMware ESXi 3.5 through 4.1, and VMware ESX 3.0.3 through 4.1, when a Solaris or FreeBSD guest OS is used, allows guest OS users to...

CVE-2011-2146

CVE-2011-2146 concerns the VMware Host Guest File System (HGFS) disclosure issue. The description specifies that mount.vmhgfs in VMware Workstation (7.1.x before 7.1.4), VMware Player (3.1.x before 3.1.4), VMware Fusion (3.1.x before 3.1.3), and VMware ESXi/ESX (versions 3.5–4.1) allows guest OS ...

CVE-2011-1787

Race condition in mount.vmhgfs in the VMware Host Guest File System HGFS in VMware Workstation 7.1.x before 7.1.4, VMware Player 3.1.x before 3.1.4, VMware Fusion 3.1.x before 3.1.3, VMware ESXi 3.5 through 4.1, and VMware ESX 3.0.3 through 4.1 allows guest OS users to gain privileges on the gues...

CVE-2011-2146: Exposure of Sensitive Information to an Unauthorized Actor

mount.vmhgfs in the VMware Host Guest File System HGFS in VMware Workstation 7.1.x before 7.1.4, VMware Player 3.1.x before 3.1.4, VMware Fusion 3.1.x before 3.1.3, VMware ESXi 3.5 through 4.1, and VMware ESX 3.0.3 through 4.1 allows guest OS users to determine the existence of host OS files and...

The KMPlayer 3.0.0.1440 .mp3 Buffer Overflow Exploit XPSP3 DEP Bypass

Exploit for windows platform in category local exploits !/usr/bin/python The KMPlayer 3.0.0.1440 .mp3 Buffer Overflow Exploit XPSP3 DEP Bypass Downloaded from: http://download.cnet.com/The-KMPlayer/3000-136324-10659939.html 06 Jun 11 Cobbled together by dookie and ronin This exploit performs DEP...

CVE-2011-1787: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in mount.vmhgfs in the VMware Host Guest File System HGFS in VMware Workstation 7.1.x before 7.1.4, VMware Player 3.1.x before 3.1.4, VMware Fusion 3.1.x before 3.1.3, VMware ESXi 3.5 through 4.1, and VMware ESX 3.0.3 through 4.1 allows guest OS users to gain privileges on the gues...

CVE-2011-2145: Undefined Security Weakness

mount.vmhgfs in the VMware Host Guest File System HGFS in VMware Workstation 7.1.x before 7.1.4, VMware Player 3.1.x before 3.1.4, VMware Fusion 3.1.x before 3.1.3, VMware ESXi 3.5 through 4.1, and VMware ESX 3.0.3 through 4.1, when a Solaris or FreeBSD guest OS is used, allows guest OS users to...

PT-2011-3635

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 7.1.x through 7.1.3 VMware Player versions 3.1.x through 3.1.3 VMware Fusion versions 3.1.x through 3.1.2 VMware ESXi versions 3.5 through 4.1 VMware ESX versions 3.0.3 through 4.1 Description The issue allows guest...

VMware Releases Security Advisory

VMware has released security advisory VMSA-2011-0009 to address multiple vulnerabilities in the following products: VMware Workstation 7.1.3 and earlier VMware Player 3.1.3 and earlier VMware Fusion 3.1.2 and earlier ESXi 4.1 without patch ESXi410-201104402-BG ESXi 4.0 without patch...

PT-2011-3634

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 7.1.x through 7.1.3 VMware Player versions 3.1.x through 3.1.3 VMware Fusion versions 3.1.x through 3.1.2 VMware ESXi versions 3.5 through 4.1 VMware ESX versions 3.0.3 through 4.1 Description The issue allows guest...

PT-2011-3368

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 7.1.x through 7.1.3 VMware Player versions 3.1.x through 3.1.3 VMware Fusion versions 3.1.x through 3.1.2 VMware ESXi versions 3.5 through 4.1 VMware ESX versions 3.0.3 through 4.1 Description A race condition exist...

CVE-2011-1789

The self-extracting installer in the vSphere Client Installer package in VMware vCenter 4.0 before Update 3 and 4.1 before Update 1, VMware ESXi 4.x before 4.1 Update 1, and VMware ESX 4.x before 4.1 Update 1 does not have a digital signature, which might make it easier for remote attackers to...

CVE-2011-1789

The CVE-2011-1789 entry describes an unsigned self-extracting installer in the vSphere Client Installer for VMware vCenter 4.0 (before Update 3) and 4.1 (before Update 1), as well as VMware ESXi 4.x (before 4.1 Update 1) and ESX 4.x (before 4.1 Update 1). The root cause is the lack of a digital s...

PT-2011-3370

Name of the Vulnerable Software and Affected Versions VMware vCenter versions 4.0 through 4.0 Update 2 VMware vCenter versions 4.1 through 4.1 Update 0 VMware ESXi versions 4.x through 4.1 Update 0 VMware ESX versions 4.x through 4.1 Update 0 Description The issue is related to the self-extractin...

CVE-2011-1789: Undefined Security Weakness

The self-extracting installer in the vSphere Client Installer package in VMware vCenter 4.0 before Update 3 and 4.1 before Update 1, VMware ESXi 4.x before 4.1 Update 1, and VMware ESX 4.x before 4.1 Update 1 does not have a digital signature, which might make it easier for remote attackers to...

VMSA-2011-0008 : VMware vCenter Server and vSphere Client security vulnerabilities

a. vCenter Server Directory Traversal vulnerability A directory traversal vulnerability allows an attacker to remotely retrieve files from vCenter Server without authentication. In order to exploit this vulnerability, the attacker will need to have access to the network on which the vCenter Serve...