CVE-2010-1141

CVE-2010-1141 affects VMware Tools and related VMware host components (Workstation, Player, ACE, Server, Fusion, ESXi/ESX). The flaw is improper access/loading of libraries, enabling a user-assisted remote attacker to trigger arbitrary code execution by convincing a Windows guest OS user to click...

CVE-2010-1139

Format string vulnerability in vmrun in VMware VIX API 1.6.x, VMware Workstation 6.5.x before 6.5.4 build 246459, VMware Player 2.5.x before 2.5.4 build 246459, and VMware Server 2.x on Linux, and VMware Fusion 2.x before 2.0.7 build 246742, allows local users to gain privileges via format string...

PT-2009-4703

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 6.5.x through 6.5.3 build 185404 VMware Player versions 2.5.x through 2.5.3 build 185404 VMware ACE versions 2.5.x through 2.5.3 build 185404 VMware Server versions 1.x through 1.0.10 build 203137 VMware Server...

VMware PF异常本地权限提升漏洞

BUGTRAQ ID: 36841 CVECAN ID: CVE-2009-2267 VMWare是一款虚拟PC软件，允许在一台机器上同时运行两个或多个Windows、DOS、LINUX系统。 在受保护的模式中，cpl通常等于cs寄存器最不重要的两位，但也有一个例外：在Virtual-8086模式中，无论cs寄存器为何值cpl总是为 3（最少权限）。当处理器出现PF异常时，会向包含有标记的栈上Push一个异常代码，操作系统使用这个标记确定正确地操作阶段。其中的一个标记为 U/S（user/supervisor），当处理器处于用户态时出现错误会设置这个标记。...

Invalid #PF Exception Code in VMware can result in Guest Privilege Escalation

No description provided by source. Invalid PF Exception Code in VMware can result in Guest Privilege Escalation ----------------------------------------------------------------------------- In protected mode, cpl is usually equal to the two least significant bits of the cs register. However, ther...

VMware Virtual 8086 - Linux Local Ring0

Bugtraq ID: 36841 Class: Design Error Published: Oct 27 2009 12:00AM Updated: Oct 27 2009 09:18PM Credit: Tavis Ormandy and Julien Tinnes of the Google Security Team Vulnerable: VMWare Workstation 6.5.3 VMWare Workstation 6.5.2 build 156735 VMWare Workstation 6.5.2 VMWare Workstation 6.5.1 VMWare...

CVE-2009-3282

Integer overflow in the vmx86 kernel extension in VMware Fusion before 2.0.6 build 196839 allows host OS users to cause a denial of service to the host OS via unspecified vectors...

CVE-2009-3281

The vmx86 kernel extension in VMware Fusion before 2.0.6 build 196839 does not use correct file permissions, which allows host OS users to gain privileges on the host OS via unspecified vectors...

Integer overflow

Integer overflow in the vmx86 kernel extension in VMware Fusion before 2.0.6 build 196839 allows host OS users to cause a denial of service to the host OS via unspecified vectors...

Code injection

The vmx86 kernel extension in VMware Fusion before 2.0.6 build 196839 does not use correct file permissions, which allows host OS users to gain privileges on the host OS via unspecified vectors...

CVE-2009-3282

Integer overflow in the vmx86 kernel extension in VMware Fusion before 2.0.6 build 196839 allows host OS users to cause a denial of service to the host OS via unspecified vectors...

CVE-2009-3282

Summary of findings (CVE-2009-3282 and related CVE-2009-3281) : VMware Fusion before 2.0.6 (build 196839) is affected by two issues in the vmx86 kernel extension. CVE-2009-3282 is an integer overflow that allows an unprivileged user on the host to cause a denial of service. CVE-2009-3281 is a ker...

CVE-2009-3281

The vmx86 kernel extension in VMware Fusion before 2.0.6 build 196839 does not use correct file permissions, which allows host OS users to gain privileges on the host OS via unspecified vectors...

CVE-2009-3281

Summary (CVE-2009-3281 / CVE-2009-3282 in VMware Fusion) VMware Fusion 2.0.5 and earlier are affected by two kernel issues in the vmx86 extension: CVE-2009-3281 (file-permission problem enabling arbitrary code execution in host kernel context by an unprivileged user) and CVE-2009-3282 (integer ov...

VMWare Fusion本地拒绝服务和权限提升漏洞

BUGTRAQ ID: 36579,36578 CVE ID: CVE-2009-3282,CVE-2009-3281 VMWare Fusion允许在基于Intel的Mac机器上无缝的运行Windows应用程序。 VMWare Fusion的vmx86内核扩展中存在文件权限漏洞和整数溢出漏洞，本地非特权用户可以利用这些漏洞在主机系统上执行任意内核态代码或导致拒绝服务。 VMWare Fusion 2.0 厂商补丁： VMWare ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.vmware.com / vmware-pop.c...

VMSA-2009-0013 VMware Fusion resolves two security issues

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ VMware Security Advisory Advisory ID: VMSA-2009-0013 Synopsis: VMware Fusion resolves two security issues Issue date: 2009-10-01 Updated on: 2009-10-01 initial release of...

VMware Fusion 2.0.5 - vmx86 kext Local Buffer Overflow (PoC)

VMware Fusion 2.0.5 - vmx86 kext Local Buffer Overflow PoC / vmware-pop.c Copyright c 2009 by VMware Fusion include include include include include define VMX86IOCTL 0x80045643 struct ioctlreq struct ioctlreqbuf uaddr; ; struct ioctlreqbuf char pad0x8; int len; char pad0xC; ; int main int argc,...

VMWare Fusion <= 2.0.5 vmx86 kext local PoC

Exploit for unknown platform in category local exploits =========================================== VMWare Fusion include include include include include define VMX86IOCTL 0x80045643 struct ioctlreq struct ioctlreqbuf uaddr; ; struct ioctlreqbuf char pad0x8; int len; char pad0xC; ; int main int...

VMware Fusion 2.0.5 - vmx86 kext Kernel Privilege Escalation

VMware Fusion 2.0.5 - vmx86 kext Kernel Privilege Escalation / vmware-fission.c Copyright c 2009 by VMware Fusion include include include include include include include include include ifndef IOCPARMMASK define IOCPARMMASK 0x1FFF endif ifndef IOCPARMLEN define IOCPARMLENa a 16 & IOCPARMMASK endi...

VMware Fusion 2.0.5 - vmx86 kext Local Buffer Overflow (PoC)

/ vmware-pop.c Copyright c 2009 by VMware Fusion include include include include include define VMX86IOCTL 0x80045643 struct ioctlreq struct ioctlreqbuf uaddr; ; struct ioctlreqbuf char pad0x8; int len; char pad0xC; ; int main int argc, char argv struct ioctlreq req; struct ioctlreqbuf buf; int f...