CVE-2010-4297: Improper Input Validation

The VMware Tools update functionality in VMware Workstation 6.5.x before 6.5.5 build 328052 and 7.x before 7.1.2 build 301548; VMware Player 2.5.x before 2.5.5 build 328052 and 3.1.x before 3.1.2 build 301548; VMware Server 2.0.2; VMware Fusion 2.x before 2.0.8 build 328035 and 3.1.x before 3.1.2...

CVE-2010-4294: Improper Control of Generation of Code

The frame decompression functionality in the VMnc media codec in VMware Movie Decoder before 6.5.5 build 328052 and 7.x before 7.1.2 build 301548, VMware Workstation 6.5.x before 6.5.5 build 328052 and 7.x before 7.1.2 build 301548 on Windows, VMware Player 2.5.x before 2.5.5 build 246459 and 3.x...

CVE-2010-4296: Incorrect Authorization

vmware-mount in VMware Workstation 7.x before 7.1.2 build 301548 on Linux, VMware Player 3.1.x before 3.1.2 build 301548 on Linux, VMware Server 2.0.2 on Linux, and VMware Fusion 3.1.x before 3.1.2 build 332101 does not properly load libraries, which allows host OS users to gain privileges via...

CVE-2010-4408: Improper Neutralization of Input During Web Page Generation

Apache Archiva 1.0 through 1.0.3, 1.1 through 1.1.4, 1.2 through 1.2.2, and 1.3 through 1.3.1 does not require entry of the administrator's password at the time of modifying a user account, which makes it easier for context-dependent attackers to gain privileges by leveraging a 1 unattended...

PT-2010-5484

Name of the Vulnerable Software and Affected Versions Apache Archiva versions 1.0 through 1.3.1 Description The issue allows context-dependent attackers to gain privileges more easily by leveraging either an unattended workstation or a cross-site request forgery CSRF vulnerability. This occurs...

VMware Releases Security Advisory VMSA-2010-0018

VMware has released security advisory VMSA-2010-0018 to address multiple vulnerabilities affecting VMware Workstation, Player, Fusion, ESXi, and ESX. Exploitation of these vulnerabilities may allow an attacker to execute arbitrary code or operate with elevated privileges. US-CERT encourages users...

MP3 Workstation DLL Hijacking

=================================================== MP3 Workstation DLL Hijacking Exploit iacenc.dll =================================================== || || | || o,7 || . o7 || 4||| ow, : / / . 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0...

MP3 Workstation DLL Hijacking Exploit (iacenc.dll)

Exploit for windows platform in category local exploits ================================================== MP3 Workstation DLL Hijacking Exploit iacenc.dll ================================================== || || | || o,7 || . o7 || 4||| ow, : / /...

Fedora Update for ardour FEDORA-2010-15499

Check for the Version of ardour OpenVAS Vulnerability Test Fedora Update for ardour FEDORA-2010-15499 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Fedora Update for ardour FEDORA-2010-15510

Check for the Version of ardour OpenVAS Vulnerability Test Fedora Update for ardour FEDORA-2010-15510 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

[SECURITY] Fedora 13 Update: ardour-2.8.11-5.fc13

Ardour is a multichannel hard disk recorder HDR and digital audio worksta tion DAW. It is capable of simultaneous recording 24 or more channels of 32 bit audio at 48kHz. Ardour is intended to function as a "professional" HDR syst em, replacing dedicated hardware solutions such as the Mackie HDR,...

[SECURITY] Fedora 14 Update: ardour-2.8.11-5.fc14

Ardour is a multichannel hard disk recorder HDR and digital audio worksta tion DAW. It is capable of simultaneous recording 24 or more channels of 32 bit audio at 48kHz. Ardour is intended to function as a "professional" HDR syst em, replacing dedicated hardware solutions such as the Mackie HDR,...

Microsoft Workstation Service - NetpManageIPCConnect Overflow (MS06-070) (Metasploit)

$Id: ms06070wkssvc.rb 10554 2010-10-05 19:29:10Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...

Video Workstation Version 5.3.9.4 dll hijacking (iacenc.dll, ir50_lcs.dll)

Exploit for windows platform in category local exploits ======================================================================= Video Workstation Version 5.3.9.4 dll hijacking iacenc.dll,ir50lcs.dll ======================================================================= / Video Workstation Versio...

VMware Products Security Bypass Vulnerability (VMSA-2010-0014) - Windows

VMWare products are prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2010-3277

The installer in VMware Workstation 7.x before 7.1.2 build 301548 and VMware Player 3.x before 3.1.2 build 301548 renders an index.htm file if present in the installation directory, which might allow local users to trigger unintended interpretation of web script or HTML by creating this file...

Design/Logic Flaw

The installer in VMware Workstation 7.x before 7.1.2 build 301548 and VMware Player 3.x before 3.1.2 build 301548 renders an index.htm file if present in the installation directory, which might allow local users to trigger unintended interpretation of web script or HTML by creating this file...

CVE-2010-3277

The installer in VMware Workstation 7.x before 7.1.2 build 301548 and VMware Player 3.x before 3.1.2 build 301548 renders an index.htm file if present in the installation directory, which might allow local users to trigger unintended interpretation of web script or HTML by creating this file...

CVE-2010-3277

Summary: CVE-2010-3277 affects VMware Workstation 7.x (before 7.1.2 build 301548) and VMware Player 3.x (before 3.1.2 build 301548). The installer can render an index.htm file present in the installation directory, potentially causing local users to trigger unintended interpretation of web script...

CVE-2010-3277: Undefined Security Weakness

The installer in VMware Workstation 7.x before 7.1.2 build 301548 and VMware Player 3.x before 3.1.2 build 301548 renders an index.htm file if present in the installation directory, which might allow local users to trigger unintended interpretation of web script or HTML by creating this file...