VMWare Fusion本地拒绝服务和权限提升漏洞

BUGTRAQ ID: 36579,36578 CVE ID: CVE-2009-3282,CVE-2009-3281 VMWare Fusion允许在基于Intel的Mac机器上无缝的运行Windows应用程序。 VMWare Fusion的vmx86内核扩展中存在文件权限漏洞和整数溢出漏洞，本地非特权用户可以利用这些漏洞在主机系统上执行任意内核态代码或导致拒绝服务。 VMWare Fusion 2.0 厂商补丁： VMWare ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.vmware.com / vmware-pop.c...

VMSA-2009-0013 VMware Fusion resolves two security issues

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ VMware Security Advisory Advisory ID: VMSA-2009-0013 Synopsis: VMware Fusion resolves two security issues Issue date: 2009-10-01 Updated on: 2009-10-01 initial release of...

VMWare Fusion <= 2.0.5 vmx86 kext local kernel root exploit

Exploit for unknown platform in category local exploits =========================================================== VMWare Fusion include include include include include include include mach/...

VMware Fusion 2.0.5 - vmx86 kext Kernel Privilege Escalation

VMware Fusion 2.0.5 - vmx86 kext Kernel Privilege Escalation / vmware-fission.c Copyright c 2009 by VMware Fusion include include include include include include include include include ifndef IOCPARMMASK define IOCPARMMASK 0x1FFF endif ifndef IOCPARMLEN define IOCPARMLENa a 16 & IOCPARMMASK endi...

VMware Fusion 2.0.5 - vmx86 kext Local Buffer Overflow (PoC)

VMware Fusion 2.0.5 - vmx86 kext Local Buffer Overflow PoC / vmware-pop.c Copyright c 2009 by VMware Fusion include include include include include define VMX86IOCTL 0x80045643 struct ioctlreq struct ioctlreqbuf uaddr; ; struct ioctlreqbuf char pad0x8; int len; char pad0xC; ; int main int argc,...

VMWare Fusion <= 2.0.5 vmx86 kext local PoC

Exploit for unknown platform in category local exploits =========================================== VMWare Fusion include include include include include define VMX86IOCTL 0x80045643 struct ioctlreq struct ioctlreqbuf uaddr; ; struct ioctlreqbuf char pad0x8; int len; char pad0xC; ; int main int...

VMware Fusion 2.0.5 - vmx86 kext Local Buffer Overflow (PoC)

/ vmware-pop.c Copyright c 2009 by VMware Fusion include include include include include define VMX86IOCTL 0x80045643 struct ioctlreq struct ioctlreqbuf uaddr; ; struct ioctlreqbuf char pad0x8; int len; char pad0xC; ; int main int argc, char argv struct ioctlreq req; struct ioctlreqbuf buf; int f...

VMware Fusion < 2.0.6 (VMSA-2009-0013)

The version of VMware Fusion installed on the Mac OS X host is earlier than 2.0.6. Such versions are affected by two security issues : - A vulnerability in the vmx86 kernel extension allows an unprivileged userland program to initialize several function pointers via the '0x802E564A' IOCTL code,...

VMSA-2009-0013:VMware Fusion resolves two security issues

VMSA-2009-0013 VMware Fusion resolves two security issues VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2009-0013 VMware Security Advisory Synopsis: VMware Fusion resolves two security issues VMware Security Advisory Issue date: 2009-10-01 VMware Security Advisory Updated on...

CVE-2009-1805: Undefined Security Weakness

Unspecified vulnerability in the VMware Descheduled Time Accounting driver in VMware Workstation 6.5.1 and earlier, VMware Player 2.5.1 and earlier, VMware ACE 2.5.1 and earlier, VMware Server 1.x before 1.0.9 build 156507 and 2.x before 2.0.1 build 156745, VMware Fusion 2.x before 2.0.2 build...

CVE-2009-1244: Undefined Security Weakness

Unspecified vulnerability in the virtual machine display function in VMware Workstation 6.5.1 and earlier; VMware Player 2.5.1 and earlier; VMware ACE 2.5.1 and earlier; VMware Server 1.x before 1.0.9 build 156507 and 2.x before 2.0.1 build 156745; VMware Fusion before 2.0.4 build 159196; VMware...

CVE-2008-4916: Undefined Security Weakness

Unspecified vulnerability in a guest virtual device driver in VMware Workstation before 5.5.9 build 126128, and 6.5.1 and earlier 6.x versions; VMware Player before 1.0.9 build 126128, and 2.5.1 and earlier 2.x versions; VMware ACE before 1.0.8 build 125922, and 2.5.1 and earlier 2.x versions;...

CVE-2009-0177: Undefined Security Weakness

vmwarebase.dll, as used in the vmware-authd service aka vmware-authd.exe, in VMware Workstation 6.5.1 build 126130, 6.5.1 and earlier; VMware Player 2.5.1 build 126130, 2.5.1 and earlier; VMware ACE 2.5.1 and earlier; VMware Server 2.0.x before 2.0.1 build 156745; and VMware Fusion before 2.0.2...

VMware 2.5.1 - 'VMware-authd' Remote Denial of Service

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- Vmware = 2.5.1 build-126130 Remote Denial of Service Application:...

VMware存在多个安全漏洞

BUGTRAQ ID:30934 CVE ID：CVE-2008-3691 CVE-2008-3692 CVE-2008-3693 CVE-2008-3694 CVE-2008-3695 CVE-2008-3696 CNCVE ID：CNCVE-20083691 CNCVE-20083692 CNCVE-20083693 CNCVE-20083694 CNCVE-20083695 CNCVE-20083696 VMWare是一款虚拟PC软件，允许在一台机器上同时运行两个或多个Windows、DOS、LINUX系统。 多个VMWare...

CVE-2008-2100

CVE-2008-2100 corresponds to VMware VIX API Multiple Buffer Overflow Vulnerabilities (VMSA-2008-0009). It affects VIX API 1.1.x before 1.1.4 build 93057 across host products (VMware Workstation 5.x/6.x, VMware Player 1.x/2.x, VMware ACE 2.x, VMware Server 1.x, VMware Fusion 1.x, VMware ESXi 3.5, ...

VMSA-2008-0009 Updates to VMware Workstation, VMware Player, VMware ACE, VMware Fusion, VMware Server, VMware VIX API, VMware ESX, VMware ESXi resolve critical security issues

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 - ------------------------------------------------------------------- VMware Security Advisory Advisory ID: VMSA-2008-0009 Synopsis: Updates to VMware Workstation, VMware Player, VMware ACE, VMware Fusion, VMware Server, VMware VIX API, VMware ESX,...

CVE-2008-2100: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in VIX API 1.1.x before 1.1.4 build 93057 on VMware Workstation 5.x and 6.x, VMware Player 1.x and 2.x, VMware ACE 2.x, VMware Server 1.x, VMware Fusion 1.x, VMware ESXi 3.5, and VMware ESX 3.0.1 through 3.5 allow guest OS users to execute arbitrary code on the host OS v...

CVE-2008-2098: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the VMware Host Guest File System HGFS in VMware Workstation 6 before 6.0.4 build 93057, VMware Player 2 before 2.0.4 build 93057, VMware ACE 2 before 2.0.2 build 93057, and VMware Fusion before 1.1.2 build 87978, when folder sharing is used, allows guest OS users to...

CVE-2008-1364: Undefined Security Weakness

Unspecified vulnerability in the DHCP service in VMware Workstation 5.5.x before 5.5.6, VMware Player 1.0.x before 1.0.6, VMware ACE 1.0.x before 1.0.5, VMware Server 1.0.x before 1.0.5, and VMware Fusion 1.1.x before 1.1.1 allows attackers to cause a denial of service...