VMware Workstation / Player < 12.5.5 - Local Privilege Escalation Exploit

Exploit for multiple platform in category local exploits !/bin/bash VMware Workstation Local Privilege Escalation exploit CVE-2017-4915 - https://www.vmware.com/security/advisories/VMSA-2017-0009.html - https://www.exploit-db.com/exploits/42045/ Affects: - VMware Workstation Player...

CVE-2017-4898

VMware Workstation Pro/Player 12.x before 12.5.3 contains a DLL loading vulnerability that occurs due to the "vmware-vmx" process loading DLLs from a path defined in the local environment-variable. Successful exploitation of this issue may allow normal users to escalate privileges to System in th...

CVE-2017-4903: Improper Restriction of Operations within the Bounds of a Memory Buffer

VMware ESXi 6.5 without patch ESXi650-201703410-SG, 6.0 U3 without patch ESXi600-201703401-SG, 6.0 U2 without patch ESXi600-201703403-SG, 6.0 U1 without patch ESXi600-201703402-SG, and 5.5 without patch ESXi550-201703401-SG; Workstation Pro / Player 12.x prior to 12.5.5; and Fusion Pro / Fusion 8...

CVE-2017-4905: Use of Uninitialized Resource

VMware ESXi 6.5 without patch ESXi650-201703410-SG, 6.0 U3 without patch ESXi600-201703401-SG, 6.0 U2 without patch ESXi600-201703403-SG, 6.0 U1 without patch ESXi600-201703402-SG, 5.5 without patch ESXi550-201703401-SG; Workstation Pro / Player 12.x prior to 12.5.5; and Fusion Pro / Fusion 8.x...

CVE-2017-4902: Improper Restriction of Operations within the Bounds of a Memory Buffer

VMware ESXi 6.5 without patch ESXi650-201703410-SG and 5.5 without patch ESXi550-201703401-SG; Workstation Pro / Player 12.x prior to 12.5.5; and Fusion Pro / Fusion 8.x prior to 8.5.6 have a Heap Buffer Overflow in SVGA. This issue may allow a guest to execute code on the host...

VMware Workstation Pro for Linux and VMware Workstation Player for Linux Elevation of Privilege Vulnerability

VMware Workstation Pro for Linux and VMware Workstation Player for Linux are both Linux-based virtual machine software products from VMware.VMware Workstation Pro for Linux is one of the VMware Workstation Pro for Linux is one of the professional editions; VMware Workstation Player for Linux is a...

PT-2017-2234

Name of the Vulnerable Software and Affected Versions VMware ESXi versions 5.5 through 6.5 without specified patches VMware Workstation Pro versions 12.x prior to 12.5.5 VMware Workstation Player versions 12.x prior to 12.5.5 VMware Fusion Pro versions 8.x prior to 8.5.6 VMware Fusion versions 8....

PT-2017-16192

Name of the Vulnerable Software and Affected Versions VMware ESXi versions 5.5 without patch ESXi550-201703401-SG, 6.0 U1 without patch ESXi600-201703402-SG, 6.0 U2 without patch ESXi600-201703403-SG, 6.0 U3 without patch ESXi600-201703401-SG, 6.5 without patch ESXi650-201703410-SG VMware...

VMware Workstation Player 'DnD' Out-of-Bounds Access Vulnerability - Windows

VMware Workstation Player is prone to an out-of-bounds memory access vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2016-7461

The drag-and-drop aka DnD function in VMware Workstation Pro 12.x before 12.5.2 and VMware Workstation Player 12.x before 12.5.2 and VMware Fusion and Fusion Pro 8.x before 8.5.2 allows guest OS users to execute arbitrary code on the host OS or cause a denial of service out-of-bounds memory acces...

CVE-2016-7085

CVE-2016-7085 describes an untrusted search path vulnerability in VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows, enabling local privilege escalation via a Trojan horse DLL placed in an unspecified directory. The initial description states th...

CVE-2016-7086: Undefined Security Weakness

The installer in VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows allows local users to gain privileges via a Trojan horse setup64.exe file in the installation directory...

CVE-2016-7085: Untrusted Search Path

Untrusted search path vulnerability in the installer in VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows allows local users to gain privileges via a Trojan horse DLL in an unspecified directory...

PT-2016-7200

Name of the Vulnerable Software and Affected Versions VMware Workstation Pro versions 12.0 through 12.4 VMware Workstation Player versions 12.0 through 12.4 Description The issue is related to multiple heap-based buffer overflows that can occur when Cortado ThinPrint virtual printing is enabled...

PT-2016-7343

Name of the Vulnerable Software and Affected Versions VMware Workstation Pro versions 12.0 through 12.5.1 VMware Workstation Player versions 12.0 through 12.5.1 VMware Fusion and Fusion Pro versions 8.0 through 8.5.1 Description The issue concerns the drag-and-drop function, allowing guest OS use...

PT-2016-7201

Name of the Vulnerable Software and Affected Versions VMware Workstation Pro versions 12.0 through 12.4 VMware Workstation Player versions 12.0 through 12.4 Description The issue allows guest OS users to execute arbitrary code on the host OS or cause a denial of service via an EMF file when Corta...

CVE-2016-7084: Improper Restriction of Operations within the Bounds of a Memory Buffer

tpview.dll in VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows, when Cortado ThinPrint virtual printing is enabled, allows guest OS users to execute arbitrary code on the host OS or cause a denial of service host OS memory corruption via a JPEG...

CVE-2016-7083: Improper Restriction of Operations within the Bounds of a Memory Buffer

VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows, when Cortado ThinPrint virtual printing is enabled, allow guest OS users to execute arbitrary code on the host OS or cause a denial of service host OS memory corruption via TrueType fonts embedd...

PT-2016-7202

Name of the Vulnerable Software and Affected Versions VMware Workstation Pro versions 12.0 through 12.4 VMware Workstation Player versions 12.0 through 12.4 Description The issue allows guest OS users to execute arbitrary code on the host OS or cause a denial of service due to host OS memory...

CVE-2016-7081: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple heap-based buffer overflows in VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows, when Cortado ThinPrint virtual printing is enabled, allow guest OS users to execute arbitrary code on the host OS via unspecified vectors...