VMware View Portal <= 3.1 XSS vulnerability

No description provided by source. DSECRG-09-058 Vmware View - XSS vulnerability Source:http://www.dsecrg.com/pages/vul/show.php?id=158 Linked XSS in VMware Portal Digital Security Research Group DSecRG Advisory DSECRG-09-058 Application: VMware View Portal Versions Affected: = 3.1 Vendor URL:...

VMware View 4.x < 4.6.2 / 5.x < 5.1.2 VMCI Privilege Escalation (VMSA-2013-0002)

The version of VMware View installed on the remote host is a version prior to 4.6.2 / 5.1.2. It is, therefore, reportedly affected by a privilege escalation vulnerability in the Virtual Machine Communication Interface VMCI in the 'VMCI.sys' driver. By exploiting this issue, a local attacker could...

CVE-2013-1406: Improper Input Validation

The Virtual Machine Communication Interface VMCI implementation in vmci.sys in VMware Workstation 8.x before 8.0.5 and 9.x before 9.0.1 on Windows, VMware Fusion 4.1 before 4.1.4 and 5.0 before 5.0.2, VMware View 4.x before 4.6.2 and 5.x before 5.1.2 on Windows, VMware ESXi 4.0 through 5.1, and...

VMware View Agent Detection

VMware View Agent, a component of VMware View which is formerly known as VMware Virtual Desktop Infrastructure, is installed on the remote host. VMware View Agent is installed on desktops to allow the desktop to communicate with VMware View clients. C Tenable Network Security, Inc...

VMware View Server Detection

VMware View Server, formerly known as VMware Virtual Desktop Infrastructure, is installed on the remote host. VMware View Server is an OS virtual desktop solution for personalized virtual desktops as a managed service from a virtualized platform. C Tenable Network Security, Inc...

VMware View Server Directory Traversal Vulnerability (VMSA-2012-0017)

The version of VMware View Server installed on the remote host is potentially affected by a directory traversal vulnerability in the Connection Server and View Security Server. This may allow a remote attacker to read arbitrary files from the system. C Tenable Network Security, Inc...

VMware View Multiple Vulnerabilities (VMSA-2012-0004)

The VMware View, formerly VMware Virtual Desktop Infrastructure components Agent or Server, on the remote host is 4.x prior to 4.6.1. It is, therefore, potentially affected by the following vulnerabilities : - A buffer overflow vulnerability exists in the XPDM and WDDM display drivers and a NULL...

VMware View critical directory traversal vulnerability

DDI Vulnerability Research Team VRT for reported a critical vulnerability in VMware View Server , that is a directory traversal vulnerability that allows an unauthenticated remote attacker to retrieve arbitrary files from affected View Servers. Exploitation of this issue may expose sensitive...

CVE-2012-5978

Multiple directory traversal vulnerabilities in the 1 View Connection Server and 2 View Security Server in VMware View 4.x before 4.6.2 and 5.x before 5.1.2 allow remote attackers to read arbitrary files via unspecified vectors...

CVE-2012-5978: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in the 1 View Connection Server and 2 View Security Server in VMware View 4.x before 4.6.2 and 5.x before 5.1.2 allow remote attackers to read arbitrary files via unspecified vectors...

KLA10384 RLF vulnerability in VMware View

A directory traversal vulnerability was found in VMware Viewer. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via unspecified vectors. Original advisories VMware bulletin Exploitation Related products VMware-View CVE list...

DDIVRT-2012-48 VMware View Connection Server Directory Traversal &#40;CVE-2012-5978&#41;

Title ----- DDIVRT-2012-48 VMware View Connection Server Directory Traversal CVE-2012-5978 Severity -------- High Date Discovered --------------- September 26, 2012 Discovered By ------------- Digital Defense, Inc. Vulnerability Research Team Credit: r@b13$ Vulnerability Description...

CVE-2012-1666

The CVE-2012-1666 entry describes an untrusted search path vulnerability in VMware Tools components across VMware Workstation (before 8.0.4), VMware Player (before 4.0.4), VMware Fusion (before 4.1.2), VMware View (before 5.1), and VMware ESX (4.1 before U3 and 5.0 before P03). The underlying iss...

CVE-2012-1666: Undefined Security Weakness

Untrusted search path vulnerability in VMware Tools in VMware Workstation before 8.0.4, VMware Player before 4.0.4, VMware Fusion before 4.1.2, VMware View before 5.1, and VMware ESX 4.1 before U3 and 5.0 before P03 allows local users to gain privileges via a Trojan horse tpfc.dll file in the...

VMWare View multiple security vulnerabilities

Multiple XSS vulnerabilities...

CVE-2012-1511

Cross-site scripting XSS vulnerability in View Manager Portal in VMware View before 4.6.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

CVE-2012-1509

Buffer overflow in the XPDM display driver in VMware View before 4.6.1 allows guest OS users to gain guest OS privileges via unspecified vectors...

CVE-2012-1509

Buffer overflow in the XPDM display driver in VMware View before 4.6.1 allows guest OS users to gain guest OS privileges via unspecified vectors...

CVE-2012-1511

Cross-site scripting XSS vulnerability in View Manager Portal in VMware View before 4.6.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

Cross site scripting

Cross-site scripting XSS vulnerability in View Manager Portal in VMware View before 4.6.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...