Null pointer dereference

The graphic acceleration functions in VMware Tools 9.x and 10.x before 10.0.9 on OS X allow local users to gain privileges or cause a denial of service NULL pointer dereference via unspecified vectors, a different vulnerability than CVE-2016-7080...

CVE-2016-5328

VMware Tools 9.x and 10.x before 10.1.0 on OS X, when System Integrity Protection SIP is enabled, allows local users to determine kernel memory addresses and bypass the kASLR protection mechanism via unspecified vectors...

Authentication flaw

VMware Tools 9.x and 10.x before 10.1.0 on OS X, when System Integrity Protection SIP is enabled, allows local users to determine kernel memory addresses and bypass the kASLR protection mechanism via unspecified vectors...

CVE-2016-5328

VMware Tools 9.x and 10.x before 10.1.0 on OS X, when System Integrity Protection SIP is enabled, allows local users to determine kernel memory addresses and bypass the kASLR protection mechanism via unspecified vectors...

CVE-2016-7079

The graphic acceleration functions in VMware Tools 9.x and 10.x before 10.0.9 on OS X allow local users to gain privileges or cause a denial of service NULL pointer dereference via unspecified vectors, a different vulnerability than CVE-2016-7080...

CVE-2016-7080

The graphic acceleration functions in VMware Tools 9.x and 10.x before 10.0.9 on OS X allow local users to gain privileges or cause a denial of service NULL pointer dereference via unspecified vectors, a different vulnerability than CVE-2016-7079...

CVE-2016-5328

VMware Tools on macOS (VMware Tools 9.x/10.x before 10.1.0) with SIP enabled is affected by an information-disclosure vulnerability that allows a local attacker to obtain kernel memory addresses and bypass kASLR via unspecified vectors. The issue is documented in CVE-2016-5328 and VMware’s VMSA-2...

CVE-2016-7080

CVE-2016-7080 affects VMware Tools on macOS (OS X) where the graphic acceleration functions in VMware Tools 9.x and 10.x are vulnerable before version 10.0.9. The vulnerability allows local users to gain privileges or cause a denial of service via unspecified vectors, caused by a NULL pointer der...

VMware Tools Local Information Disclosure Vulnerability

VMware Tools is a set of enhancements that come with VMware's VMWare virtual machines. It is a set of drivers provided by VMware to enhance the performance of virtual graphics cards and hard drives, as well as to synchronize the clocks of the virtual machines with those of the host computer. A...

VMware Tools 9.x / 10.x < 10.1.0 Kernel Memory Address Disclosure (VMSA-2016-0017) (Mac OS X)

The version of VMware Tools installed on the remote macOS or Mac OS X host is 9.x or 10.x prior to 10.1.0. It is, therefore, affected by an information disclosure vulnerability in the System Integrity Protection SIP feature. A local attacker can exploit this issue to obtain kernel memory addresse...

VMWare Tools Auto-Update Renders PVS Target Devices Unresponsive

The PVS target device turn unresponsive a few seconds after booting up correctly. The behavior is only observed after devices are rebooted. The device will be marked as down on the PVS console and there will be no retries registered as the device will not reconnect to PVS...

VMware Tools Local Elevation of Privilege Vulnerability

VMware Tools is a set of enhancements that come with VMware's VMWare virtual machines. It is a set of drivers provided by VMware to enhance the performance of virtual graphics cards and hard drives, as well as to synchronize the clocks of the virtual machines with those of the host computer. A...

VMware Tools Local Elevation of Privilege Vulnerability (CNVD-2016-07808)

VMware Tools is a set of enhancements that come with VMware's VMWare virtual machines. It is a set of drivers provided by VMware to enhance the performance of virtual graphics cards and hard drives, as well as to synchronize the clocks of the virtual machines with those of the host computer. A...

VMware ESXi updates address multiple security issues (VMSA-2016-0014)

The graphic acceleration functions used in VMware Tools for OSX handle memory incorrectly. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

VMware Tools Detection (Mac OS X)

Binary data macosxvmwaretoolsinstalled.nbin...

VMware Tools 9.x / 10.x < 10.0.9 Multiple Privilege Escalations (VMSA-2016-0014) (Mac OS X)

The version of VMware Tools installed on the remote Mac OS X host is 9.x or 10.x prior to 10.0.9. It is, therefore, affected by multiple NULL pointer dereference flaws in the graphic acceleration functions due to improper memory handling. A local attacker can exploit these to gain elevated...

VMware Tools Detection (Windows SMB Login)

Detects the installed version of VMware Tools. The script logs in via smb, searches registry for VMware Tools and gets the version from SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holder...

VMware Workstation Player 'HGFS' Feature Privilege Escalation Vulnerability - Windows

VMware Workstation Player is prone to an important guest privilege escalation vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CP...

VMware Fusion 'HGFS' Feature Privilege Escalation Vulnerability - Mac OS X

VMware Fusion is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:vmware:fusion";...

VMware Workstation Player 'HGFS' Feature Privilege Escalation Vulnerability - Linux

VMware Workstation Player is prone to an important guest privilege escalation vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CP...