Buffer overflow

Buffer overflow in the XPDM display driver in VMware View before 4.6.1 allows guest OS users to gain guest OS privileges via unspecified vectors...

CVE-2012-1509

CVE-2012-1509 is tied to VMware View: a buffer overflow in the XPDM display driver within View (before 4.6.1) that enables local guest-OS privilege escalation via unspecified vectors. The issue is part of VMware advisory VMSA-2012-0004, which documents multiple View-related vulnerabilities and re...

CVE-2012-1509

Buffer overflow in the XPDM display driver in VMware View before 4.6.1 allows guest OS users to gain guest OS privileges via unspecified vectors...

CVE-2012-1511

Cross-site scripting XSS vulnerability in View Manager Portal in VMware View before 4.6.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

CVE-2012-1511: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in View Manager Portal in VMware View before 4.6.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

CVE-2012-1509: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the XPDM display driver in VMware View before 4.6.1 allows guest OS users to gain guest OS privileges via unspecified vectors...

CVE-2012-1508: Undefined Security Weakness

The XPDM display driver in VMware ESXi 4.0, 4.1, and 5.0; VMware ESX 4.0 and 4.1; and VMware View before 4.6.1 allows guest OS users to gain guest OS privileges or cause a denial of service NULL pointer dereference via unspecified vectors...

CVE-2012-1510: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the WDDM display driver in VMware ESXi 4.0, 4.1, and 5.0; VMware ESX 4.0 and 4.1; and VMware View before 4.6.1 allows guest OS users to gain guest OS privileges via unspecified vectors...

VMware Portal 3.1 Cross Site Scripting

DSECRG-09-058 Vmware View - XSS vulnerability Linked XSS in VMware Portal Digital Security Research Group DSecRG Advisory DSECRG-09-058 Application: VMware View Portal Versions Affected: alert/XSS/.source Solution Update VmWare View to version 3.1.3 References...

VMSA-2010-0008 VMware View 3.1.3 addresses an important cross-site scripting vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ VMware Security Advisory Advisory ID: VMSA-2010-0008 Synopsis: VMware View 3.1.3 addresses an important cross-site scripting vulnerability Issue date: 2010-05-05 Updated on:...

VMware View远程跨站脚本漏洞

BUGTRAQ ID: 39949 CVECAN ID: CVE-2010-1143 VMware View是业界领先的桌面虚拟化解决方案。 VMware View所使用的View Manager组件没有正确地过滤用户提交参数便返回给了用户，如果诱骗用户跟随了恶意URL就会导致反射式跨站脚本攻击。 VMware View 3.1.x 厂商补丁： VMWare ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

CVE-2010-1143

Cross-site scripting XSS vulnerability in VMware View formerly Virtual Desktop Manager or VDM 3.1.x before 3.1.3 build 252693 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in VMware View formerly Virtual Desktop Manager or VDM 3.1.x before 3.1.3 build 252693 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2010-1143

CVE-2010-1143 describes a Cross-Site Scripting vulnerability in VMware View (Portal) 3.1.x prior to 3.1.3 build 252693, allowing injection of arbitrary HTML/script via unspecified vectors. Connected documents indicate affected product scope includes VMware View Portal (3.1), with the DSecRG advis...

CVE-2010-1143: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in VMware View formerly Virtual Desktop Manager or VDM 3.1.x before 3.1.3 build 252693 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

VMware View 3.1.x - URL Processing Cross-Site Scripting

VMware View 3.1.x - URL Processing Cross-Site Scripting source: https://www.securityfocus.com/bid/39949/info VMware View is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script...

VMware View 3.1.x - URL Processing Cross-Site Scripting

source: https://www.securityfocus.com/bid/39949/info VMware View is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the contex...

VMware View 3.1.3 addresses an important cross-site scripting vulnerability

VMware View 3.1.3 addresses an cross-site scripting vulnerability in VMware View. In order for an attacker to exploit the vulnerability, the attacker would need to lure the user to click on the attacker's URL. VMware would like to thank Alexey Sintsov from Digital Security Research Group DSecRG f...