VMware vielib.dll ActiveX控件远程代码执行漏洞

BUGTRAQ ID: 25118 VMware Workstation是一款非常流行的虚拟PC机软件。 VMware intraprocesslogging.dll ActiveX控件实现上存在漏洞，远程攻击者可能利用此漏洞在用户系统上执行任意指令。 VMware中所捆绑的vielib.dll库中的StartProcess方式没有验证是否被应用程序或恶意用户调用，如果用户受骗访问了恶意网页的话，调用了该库的应用程序就可能导致以登录用户的权限执行任意指令。 VMWare Workstation 6.0 临时解决方法：...

vmware-vielib-exec.txt

:. GOODFELLAS Security Research TEAM .: :. http://goodfellas.shellcode.com.ar .: vielib.dll 2.2.5.42958 VmWare Inc version 6.0.0 Remode Code Execution Exploit ============================================================================= Internal ID: VULWAR200707290. ----------- Introduction...

CVE-2007-4058

Absolute path traversal vulnerability in a certain ActiveX control in vielib.dll 2.2.5.42958 in EMC VMware 6.0.0 allows remote attackers to execute arbitrary local programs via a full pathname in the first argument to the StartProcess method...