CVE-2016-7170

Quick Emulator QEMU built with the VMware-SVGA chipset emulation support is vulnerable to an OOB stack memory write issue. It could occur while processing VGA commands in 'vmsvgafiforun' routine. A privileged user inside guest could use this flaw to crash the QEMU process resulting in DoS...

The vulnerability of SVGA device implementations in VMware ESXi, VMware Fusion, and Vmware Workstation arises from operations that go beyond buffer boundaries in memory, allowing attackers to execute arbitrary code on the host system.

The vulnerability of SVGA devices in hypervisors such as VMware ESXi, VMware Fusion, and Vmware Workstation arises from operations that occur outside the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the host system remotely...

ESXi 6.0 / 6.5 / 6.7 Out-of-Bounds Read Vulnerability (VMSA-2018-0026) (Remote Check)

The remote VMware ESXi host is version 6.0, 6.5, or 6.7 and is missing a security patch. It is, therefore, vulnerable to an out-of-bounds read vulnerability in SVGA devices. An attacker with access to a guest system may be able to execute code on the host system by leveraging this vulnerability. ...

VMware Fusion 10.x < 10.1.3 Out-of-Bounds Read Vulnerability (VMSA-2018-0026) (macOS)

The version of VMware Fusion installed on the remote macOS or Mac OS X host is 10.x prior to 10.1.3. It is, therefore, affected by an out-of-bounds read vulnerability in SVGA devices. An attacker with access to a guest system may be able to execute code on the host system by leveraging this...

VMSA-2018-0026 : VMware ESXi, Workstation, and Fusion updates address an out-of-bounds read vulnerability

Out-of-bounds read vulnerability in SVGA Device VMware ESXi, Fusion and Workstation contain an out-of-bounds read vulnerability in SVGA device. This issue may allow a guest to execute code on the host. VMware would like to thank Anonymous working with Trend Micro's Zero Day Initiative for reporti...

CVE-2018-6974

CVE-2018-6974 describes an out-of-bounds read in the SVGA device affecting VMware ESXi (various older builds), VMware Workstation (14.x before 14.1.3), and VMware Fusion (10.x before 10.1.3). The issue could allow a guest to execute code on the host due to SVGA parsing/reading flaws. Affected pro...

CVE-2018-6974

VMware ESXi 6.7 before ESXi670-201810101-SG, 6.5 before ESXi650-201808401-BG, and 6.0 before ESXi600-201808401-BG, Workstation 14.x before 14.1.3 and Fusion 10.x before 10.1.3 contain an out-of-bounds read vulnerability in SVGA device. This issue may allow a guest to execute code on the host...

CVE-2018-6974

VMware ESXi 6.7 before ESXi670-201810101-SG, 6.5 before ESXi650-201808401-BG, and 6.0 before ESXi600-201808401-BG, Workstation 14.x before 14.1.3 and Fusion 10.x before 10.1.3 contain an out-of-bounds read vulnerability in SVGA device. This issue may allow a guest to execute code on the host...

CVE-2018-6974

VMware ESXi 6.7 before ESXi670-201810101-SG, 6.5 before ESXi650-201808401-BG, and 6.0 before ESXi600-201808401-BG, Workstation 14.x before 14.1.3 and Fusion 10.x before 10.1.3 contain an out-of-bounds read vulnerability in SVGA device. This issue may allow a guest to execute code on the host...

Out-of-bounds

VMware ESXi 6.7 before ESXi670-201810101-SG, 6.5 before ESXi650-201808401-BG, and 6.0 before ESXi600-201808401-BG, Workstation 14.x before 14.1.3 and Fusion 10.x before 10.1.3 contain an out-of-bounds read vulnerability in SVGA device. This issue may allow a guest to execute code on the host...

VMware Workstation SVGA Heap-based Buffer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to execute arbitrary code on vulnerable installations of VMware Workstation. An attacker must first obtain the ability to execute low-privileged code on the guest system in order to exploit this vulnerability. The specific flaw exists within the handling ...

VMSA-2018-0026:VMware ESXi, Workstation, and Fusion updates address an out-of-bounds read vulnerability

VMSA-2018-0026 VMware ESXi, Workstation, and Fusion updates address an out-of-bounds read vulnerability VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2018-0026 VMware Security Advisory Severity: Critical VMware Security Advisory Synopsis: VMware ESXi, Workstation, and Fusion...

VMware ESXi SVGA Device Code Execution Vulnerability (VMSA-2017-0015)

VMware ESXi is prone to a code execution vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

VMware Workstation 12.x < 12.5.7 Multiple Vulnerabilities (VMSA-2017-0015)

The version of VMware Workstation installed on the remote Windows host is 12.x prior to 12.5.7. It is, therefore, affected by the following vulnerabilities: - A remote code execution vulnerability exists in VMware workstation within the SVGA device. An attacker with user access can exploit this t...

VMware Fusion 8.x < 8.5.8 SVGA Code Execution Vulnerability (VMSA-2017-0015) (macOS)

The version of VMware Fusion installed on the remote macOS or Mac OS X host is 8.x prior to 8.5.8. It is, therefore, affected by an out-of- bounds write error related to SVGA devices that allows a guest virtual machine to execute code on the host. C Tenable Network Security, Inc...

ESXi 6.5 < Build 5969300 Multiple Vulnerabilities (VMSA-2017-0015) (remote check)

The version of the remote VMware ESXi 6.5 host is prior to build 5969300. It is, therefore, affected by multiple vulnerabilities : - An out-of-bounds write error related to SVGA devices that allows a guest virtual machine to execute code on the host machine. CVE-2017-4924 - A NULL pointer...

VMware Workstation 12.x < 12.5.7 Multiple Vulnerabilities (VMSA-2017-0015) (Linux)

The version of VMware Workstation installed on the remote Linux host is 12.x prior to 12.5.7. It is, therefore, affected by the following vulnerabilities: - A remote code execution vulnerability exists in VMware workstation within the SVGA device. An attacker with user access can exploit this to...

VMware Workstation SVGA Device Code Execution Vulnerability - Linux

VMware Workstation is prone to a code execution vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:vmware:workstation...

VMware Fusion SVGA Device Code Execution Vulnerability - Mac OS X

VMware Fusion is prone to a code execution vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:vmware:fusion";...

Many high-risk SVGA code execution vulnerability bug,VMware efforts to be patched-vulnerabilities and early warning-the black bar safety net

VMware this week announced a patch to fix a number of vulnerabilities flaws bug, contains a major vulnerability flaws bugs, exploits flaws bug touches the product containing ESXi, vCenter Server, Workstation and Fusion. This is the major vulnerability flaws bug number for CVE-2017-4924, which is ...