VMware Fusion 8.1.x < 8.1.1 Shared Folders (HGFS) Guest DLL Hijacking Arbitrary Code Execution (VMSA-2016-0010)

The version of VMware Fusion installed on the remote Mac OS X host is 8.1.x prior to 8.1.1. It is, therefore, affected by an arbitrary code execution vulnerability in the Shared Folders HGFS feature due to improper loading of Dynamic-link library DLL files from insecure paths, including the curre...

CVE-2016-5330

Untrusted search path vulnerability in the HGFS aka Shared Folders feature in VMware Tools 10.0.5 in VMware ESXi 5.0 through 6.0, VMware Workstation Pro 12.1.x before 12.1.1, VMware Workstation Player 12.1.x before 12.1.1, and VMware Fusion 8.1.x before 8.1.1 allows local users to gain privileges...

Design/Logic Flaw

Untrusted search path vulnerability in the HGFS aka Shared Folders feature in VMware Tools 10.0.5 in VMware ESXi 5.0 through 6.0, VMware Workstation Pro 12.1.x before 12.1.1, VMware Workstation Player 12.1.x before 12.1.1, and VMware Fusion 8.1.x before 8.1.1 allows local users to gain privileges...

KLA10854 Privileges escalation vulnerabilities in VMware products

Untrusted search path vulnerability was found in VMware products. By exploiting this vulnerability malicious users can gain privileges. This vulnerability can be exploited locally via DLL hijack. Technical details This vulnerability related to HGFS aka Shared Folders feature. Original advisories...

The vulnerability of VMware Fusion’s hypervisor allows users of the guest operating system to trigger a failure in the maintenance of the host operating system.

The vulnerability of the TPInt.dll library in VMware Fusion’s hypervisor is related to resource management errors. Exploiting this vulnerability can allow users of the guest operating system to cause failures in the host operating system...

The vulnerability of VMware Fusion’s hypervisor allows a attacker to trigger a failure in the hosting or host operating system.

The vulnerability of VMware Fusion exists due to insufficient verification of input data. Exploiting this vulnerability can allow an attacker to cause a failure in the maintenance of 32-bit or 64-bit host operating systems using a specially crafted RPC request...

The vulnerability of VMware Fusion allows users of the guest operating system to execute code on the host operating system.

The vulnerability of the TPView.dll library in VMware Fusion relates to resource management errors. Exploiting this vulnerability allows users of the guest operating system to execute code on the host operating system...

The vulnerability of VMware Fusion allows users of the guest operating system to execute code on the host operating system.

The vulnerability of the TPInt.dll library in VMware Fusion’s hypervisor is related to resource management errors. Exploiting this vulnerability allows users of the guest operating system to execute code on the host operating system...

The vulnerability of VMware Fusion’s hypervisor allows users of the guest operating system to trigger a failure in the maintenance of the host operating system.

The vulnerability of the TPView.dll library in VMware Fusion involves resource management errors. Exploiting this vulnerability can allow users of the guest operating system to cause failures in the host operating system...

The vulnerability of VMware Fusion’s hypervisor allows users of the guest operating system to trigger a failure in the maintenance of the host operating system.

The vulnerability of the TPView.dll library in VMware Fusion involves resource management errors. Exploiting this vulnerability can allow users of the guest operating system to cause failures in the host operating system...

The vulnerability of VMWare Workstation’s software allows a malicious individual to compromise the accessibility of protected information.

The vulnerability in VMware Workstation, VMware Player, VMware Fusion, VMware ESXi, and VMware ESX allows users of these guest operating systems to trigger a service failure VMX process crash by using an invalid port...

VMware Fusion Privilege Escalation Vulnerability (May 2016) - Mac OS X

VMware Fusion is prone to host privilege escalation vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:vmware:fusion"...

VMware Fusion HGFS Denial of Service Vulnerability (May 2016) - Mac OS X

VMware Fusion is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:vmware:fusion";...

VMware Fusion 7.x < 7.1.2 Shared Folders (HGFS) Guest Privilege Escalation (VMSA-2016-0001)

The version of VMware Fusion installed on the remote Mac OS X host is 7.x prior to 7.1.2. It is, therefore, affected by a guest privilege escalation vulnerability in the Shared Folders HGFS feature due to improper validation of user-supplied input. A local attacker can exploit this to corrupt...

CVE-2015-6933

CVE-2015-6933 affects VMware Tools HGFS across VMware Workstation (11.x prior to 11.1.2), VMware Player (7.x prior to 7.1.2), VMware Fusion (7.x prior to 7.1.2), and VMware ESXi (5.0–6.0). Root cause: HGFS/shared folders component vulnerability leading to guest OS privilege escalation or guest ke...

VMware Workstation/Player/Fusion Custom RPC Command Denial of Service Vulnerability

VMware is a vendor of desktop to datacenter virtualization solutions. A security vulnerability exists in VMware Workstation/Player/Fusion that allows a remote attacker on Guest to send specially crafted RPC commands to trigger input validation errors and conduct denial of service attacks...

VMware Workstation/Player/Fusion 'TPInt.dll' Denial of Service Vulnerability

VMware is a vendor of desktop to datacenter virtualization solutions. A memory allocation error vulnerability exists in VMware Workstation/Player/Fusion 'TPInt.dll', which allows remote attackers on Guest to conduct denial of service attacks...

VMware Workstation/Player/Fusion 'TPInt.dll' Arbitrary Code Execution Vulnerability

VMware is a vendor of desktop to datacenter virtualization solutions. A memory allocation error vulnerability exists in VMware Workstation/Player/Fusion 'TPInt.dll' that allows remote attackers on Guest to execute arbitrary code...

VMware Fusion 6.x < 6.0.5 / 7.x < 7.0.1 Multiple Vulnerabilities (VMSA-2015-0001)

The version of VMware Fusion installed on the remote Mac OS X host is version 6.x prior to 6.0.5 or version 7.x prior to 7.0.1. It is, therefore, affected by the following vulnerabilities : - An unspecified flaw exists that allows a local attacker to escalate privileges or cause a denial of servi...

CVE-2014-8370

VMware Workstation 10.x before 10.0.5, VMware Player 6.x before 6.0.5, VMware Fusion 6.x before 6.0.5, and VMware ESXi 5.0 through 5.5 allow host OS users to gain host OS privileges or cause a denial of service arbitrary write to a file by modifying a configuration file...