CVE-2013-1406: Improper Input Validation

The Virtual Machine Communication Interface VMCI implementation in vmci.sys in VMware Workstation 8.x before 8.0.5 and 9.x before 9.0.1 on Windows, VMware Fusion 4.1 before 4.1.4 and 5.0 before 5.0.2, VMware View 4.x before 4.6.2 and 5.x before 5.1.2 on Windows, VMware ESXi 4.0 through 5.1, and...

CVE-2012-1666

The CVE-2012-1666 entry describes an untrusted search path vulnerability in VMware Tools components across VMware Workstation (before 8.0.4), VMware Player (before 4.0.4), VMware Fusion (before 4.1.2), VMware View (before 5.1), and VMware ESX (4.1 before U3 and 5.0 before P03). The underlying iss...

PT-2012-3428

Name of the Vulnerable Software and Affected Versions VMware Workstation versions prior to 8.0.4 VMware Player versions prior to 4.0.4 VMware Fusion versions prior to 4.1.2 VMware View versions prior to 5.1 VMware ESX 4.1 versions prior to U3 VMware ESX 5.0 versions prior to P03 Description The...

CVE-2012-1666: Undefined Security Weakness

Untrusted search path vulnerability in VMware Tools in VMware Workstation before 8.0.4, VMware Player before 4.0.4, VMware Fusion before 4.1.2, VMware View before 5.1, and VMware ESX 4.1 before U3 and 5.0 before P03 allows local users to gain privileges via a Trojan horse tpfc.dll file in the...

VMware Fusion 4.x < 4.1.3 (VMSA-2012-0009, VMSA-2012-0011)

The version of VMware Fusion 4.x installed on the Mac OS X host is earlier than 4.1.3, and is therefore reportedly affected by the following vulnerabilities : - Due to a flaw in the virtual floppy configuration it is possible to perform an out-of-bounds memory write. This vulnerability may allow ...

CVE-2012-3288: Improper Input Validation

VMware Workstation 7.x before 7.1.6 and 8.x before 8.0.4, VMware Player 3.x before 3.1.6 and 4.x before 4.0.4, VMware Fusion 4.x before 4.1.3, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 through 4.1 allow user-assisted remote attackers to execute arbitrary code on the host OS or cause a denia...

PT-2012-4624

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 7.0 through 7.1.6 VMware Workstation versions 8.0 through 8.0.4 VMware Player versions 3.0 through 3.1.6 VMware Player versions 4.0 through 4.0.4 VMware Fusion versions 4.0 through 4.1.3 VMware ESXi versions 3.5...

CVE-2012-2449: Improper Restriction of Operations within the Bounds of a Memory Buffer

VMware Workstation 8.x before 8.0.3, VMware Player 4.x before 4.0.3, VMware Fusion 4.x through 4.1.2, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 through 4.1 do not properly configure the virtual floppy device, which allows guest OS users to cause a denial of service out-of-bounds write...

CVE-2012-2450: Undefined Security Weakness

VMware Workstation 8.x before 8.0.3, VMware Player 4.x before 4.0.3, VMware Fusion 4.x before 4.1.2, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 through 4.1 do not properly register SCSI devices, which allows guest OS users to cause a denial of service invalid write operation and VMX process...

PT-2012-4052

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 8.0.0 through 8.0.2 VMware Player versions 4.0.0 through 4.0.2 VMware Fusion versions 4.0.0 through 4.1.2 VMware ESXi versions 3.5 through 5.0 VMware ESX versions 3.5 through 4.1 Description The issue arises from th...

PT-2012-4053

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 8.0.0 through 8.0.2 VMware Player versions 4.0.0 through 4.0.2 VMware Fusion versions 4.0.0 through 4.1.1 VMware ESXi versions 3.5 through 5.0 VMware ESX versions 3.5 through 4.1 Description The issue allows guest O...

VMware Fusion 4.x < 4.1.2 (VMSA-2012-0007)

The version of VMware Fusion 4.x installed on the Mac OS X host is earlier than 4.1.2. As such, it is reportedly affected by a local privilege escalation vulnerability because the access control list of the VMware Tools folder is incorrectly set. By exploiting this issue, a local attacker could...

PT-2012-3324

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 8.0.0 through 8.0.1 VMware Player versions 4.0.0 through 4.0.1 VMware Fusion versions 4.0.0 through 4.1.1 VMware ESXi versions 3.5 through 5.0 VMware ESX versions 3.5 through 4.1 Description The issue arises from an...

CVE-2012-1518: Undefined Security Weakness

VMware Workstation 8.x before 8.0.2, VMware Player 4.x before 4.0.2, VMware Fusion 4.x before 4.1.2, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 through 4.1 use an incorrect ACL for the VMware Tools folder, which allows guest OS users to gain guest OS privileges via unspecified vectors...

VMware Fusion UDF File Systems Buffer Overflow Vulnerability (Mac OS X)

The host is installed with VMWare Fusion and are prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: secpodvmwarefusionudffilesysbofvulnmacosx.nasl 7029 2017-08-31 11:51:40Z teissa $ VMware Fusion UDF File Systems Buffer Overflow Vulnerability Mac OS X Authors: Rachana Shetty...

VMware Fusion Detection (Mac OS X SSH Login)

Detects the installed version of VMware Fusion. The script logs in via ssh, searches for folder SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

VMware Fusion UDF File Systems Buffer Overflow Vulnerability (VMSA-2011-0011) - Mac OS X

VMware Fusion is prone to a buffer overflow vulnerability. Copyright C 2011 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; yo...

PT-2011-4744

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 7.0 through 7.1.5 VMware Player versions 3.0 through 3.1.5 VMware Fusion versions 3.1.0 through 3.1.3 Description A buffer overflow issue allows remote attackers to execute arbitrary code via a crafted UDF filesyste...

KLA10385 ACE vulnerability in VMware

A buffer overflow was found in VMware products. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed ISO image. Original advisories VMware bulletin Exploitation Public exploits exist for this...

CVE-2011-3868: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in VMware Workstation 7.x before 7.1.5, VMware Player 3.x before 3.1.5, VMware Fusion 3.1.x before 3.1.3, and VMware AMS allows remote attackers to execute arbitrary code via a crafted UDF filesystem in an ISO image...