PT-2017-16193

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 12.x prior to 12.5.3 Horizon View Client versions 4.x prior to 4.4.0 Description The issue is related to multiple heap buffer-overflow vulnerabilities in the JPEG2000 parser in the TPView.dll. This may allow a guest...

Multiple Read/Write Vulnerabilities in VMware Workstation and Horizon View Client

VMware Workstation is a paid and feature-rich set of virtual machine software.VMware Workstation Player is a free open source and simpler virtual machine software.Horizon Client for Windows is used to virtualize desktops and applications. VMware Workstation and Horizon View Client have multiple...

PT-2017-16196

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 12.x prior to 12.5.3 Horizon View Client versions 4.x prior to 4.4.0 Description The issue is related to multiple out-of-bounds write vulnerabilities in the JPEG2000 parser in the TPView.dll. This may allow a guest ...

VMware Workstation Code Execution And DoS Vulnerabilities (Apr 2017) - Windows

VMware Workstation Player is prone to code execution and denial-of-service vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...

VMware Player Code Execution And DoS Vulnerabilities (Apr 2017) - Windows

VMware Player is prone to code execution and denial-of-service vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2016-7084: Improper Restriction of Operations within the Bounds of a Memory Buffer

tpview.dll in VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows, when Cortado ThinPrint virtual printing is enabled, allows guest OS users to execute arbitrary code on the host OS or cause a denial of service host OS memory corruption via a JPEG...

VMware Workstation - vprintproxy.exe TrueType NAME Tables Heap Buffer Overflow

Exploit for windows platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=849 As already discussed in a number of reports in this tracker 285, 286, 287, 288, 289, 292, VMware Workstation current version 12.1.1 build-3770994 ships with a feature called...

VMware Workstation - vprintproxy.exe JPEG2000 Images Multiple Memory Corruptions

VMware Workstation - vprintproxy.exe JPEG2000 Images Multiple Memory Corruptions Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=850 As already discussed in a number of reports in this tracker 285, 286, 287, 288, 289, 292, VMware Workstation current version 12.1.1 build-3770994...

VMware Workstation - vprintproxy.exe JPEG2000 Images Multiple Memory Corruptions

Exploit for windows platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=850 As already discussed in a number of reports in this tracker 285, 286, 287, 288, 289, 292, VMware Workstation current version 12.1.1 build-3770994 ships with a feature called...

VMware Workstation - vprintproxy.exe TrueType NAME Tables Heap Buffer Overflow (PoC)

VMware Workstation - vprintproxy.exe TrueType NAME Tables Heap Buffer Overflow PoC Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=849 As already discussed in a number of reports in this tracker 285, 286, 287, 288, 289, 292, VMware Workstation current version 12.1.1 build-377099...

VMware Workstation - 'vprintproxy.exe' JPEG2000 Images Multiple Memory Corruptions

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=850 As already discussed in a number of reports in this tracker 285, 286, 287, 288, 289, 292, VMware Workstation current version 12.1.1 build-3770994 ships with a feature called "Virtual Printers", which enables the virtualized...

VMware Workstation - 'vprintproxy.exe' TrueType NAME Tables Heap Buffer Overflow (PoC)

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=849 As already discussed in a number of reports in this tracker 285, 286, 287, 288, 289, 292, VMware Workstation current version 12.1.1 build-3770994 ships with a feature called "Virtual Printers", which enables the virtualized...

The vulnerability of the client system of the VMware Horizon View Client virtualization solution allows users of the guest operating system to execute code on the host operating system.

The vulnerability of the TPView.dll library in the VMware Horizon View Client virtualization solution is related to resource management errors. Exploiting this vulnerability allows users of the guest operating system to execute code on the host operating system...

The vulnerability of VMware Fusion’s hypervisor allows users of the guest operating system to trigger a failure in the maintenance of the host operating system.

The vulnerability of the TPView.dll library in VMware Fusion involves resource management errors. Exploiting this vulnerability can allow users of the guest operating system to cause failures in the host operating system...

The vulnerability of VMware Player allows users of the guest operating system to trigger a failure in the maintenance of the host operating system.

The vulnerability of the TPView.dll library in VMware Player is related to resource management errors. Exploiting this vulnerability can allow users of the guest operating system to cause failures in the host operating system...

The vulnerability of the client system in the VMware Horizon Client virtualization solution allows users of the guest operating system to execute code on the host operating system.

The vulnerability of the TPView.dll library in the VMware Horizon Client virtualization station client system is related to resource management errors. Exploiting this vulnerability allows users of the guest operating system to execute code on the host operating system...

The vulnerability of VMware Workstation’s hypervisor allows users of the guest operating system to trigger a failure in the maintenance of the host operating system.

The vulnerability of the TPView.dll library in VMware Workstation involves resource management errors. Exploiting this vulnerability can allow users of the guest operating system to cause failures in the host operating system...

CVE-2015-2336

CVE-2015-2336 affects VMware products on Windows: TPView.dll/TPInt.dll memory allocation issues in VMware Workstation 10.x before 10.0.6 and 11.x before 11.1.1, VMware Player 6.x before 6.0.6 and 7.x before 7.1.1, and VMware Horizon Client 3.2.x before 3.2.1, 3.3.x, and 5.x local-mode before 5.4....

CVE-2015-2338: Undefined Security Weakness

TPview.dll in VMware Workstation 10.x before 10.0.6 and 11.x before 11.1.1, VMware Player 6.x before 6.0.6 and 7.x before 7.1.1, and VMware Horizon Client 3.2.x before 3.2.1, 3.3.x, and 5.x local-mode before 5.4.2 on Windows does not properly allocate memory, which allows guest OS users to cause ...

CVE-2015-2336: Undefined Security Weakness

TPView.dll in VMware Workstation 10.x before 10.0.6 and 11.x before 11.1.1, VMware Player 6.x before 6.0.6 and 7.x before 7.1.1, and VMware Horizon Client 3.2.x before 3.2.1, 3.3.x, and 5.x local-mode before 5.4.2 on Windows does not properly allocate memory, which allows guest OS users to execut...