VMware Fixes Privilege Escalation Vulnerability

Virtualization software maker VMware issued an update last Thursday resolving a virtual machine communication interface VMCI vulnerability in its ESX Server, Workstation, Fusion and View products that could lead to a privilege escalation if unpatched. According to the VMware security advisory, a...

VMware ESX, Workstation, Fusion, and View VMCI privilege escalation vulnerability

a. VMware VMCI privilege escalation VMware ESX, Workstation, Fusion, and View contain a vulnerability in the handling of control code in vmci.sys. A local malicious user may exploit this vulnerability to manipulate the memory allocation through the Virtual Machine Communication Interface VMCI cod...

VMSA-2013-0002:VMware ESX, Workstation, Fusion, and View VMCI privilege escalation vulnerability

VMSA-2013-0002.1 VMware ESX, Workstation, Fusion, and View VMCI privilege escalation vulnerability VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2013-0002.1 VMware Security Advisory Synopsis: VMware ESX, Workstation, Fusion, and View VMCI privilege escalation vulnerability...

VMSA-2009-0005 : VMware Hosted products, VI Client and patches for ESX and ESXi resolve multiple security issues

a. Denial of service guest to host vulnerability in a virtual device A vulnerability in a guest virtual device driver, could allow a guest operating system to crash the host and consequently any virtual machines on that host. VMware would like to thank Andrew Honig of the Department of Defense fo...

VMware宿主产品VMSA-2009-0005多个远程漏洞

BUGTRAQ ID: 34373 CVE ID：CVE-2008-4916 CVE-2008-3761 CVE-2009-1146 CVE-2009-1147 CVE-2009-0910 CVE-2009-0909 CVE-2009-0908 CVE-2009-0177 CVE-2009-0518 CNCVE ID：CNCVE-20084916 CNCVE-20083761 CNCVE-20091146 CNCVE-20091147 CNCVE-20090910 CNCVE-20090909 CNCVE-20090908 CNCVE-20090177 CNCVE-20090518...

CVE-2009-1147

CVE-2009-1147 affects VMware VMCI (vmci.sys) and enables privilege escalation on Windows-based hosts/guests. The issue is described in VMware’s VMSA-2009-0005 advisory and is linked to VMCI IOCTL handling that can be abused by a local user with admin rights to gain SYSTEM privileges. A remediatio...

CVE-2009-1147

Unspecified vulnerability in vmci.sys in the Virtual Machine Communication Interface VMCI in VMware Workstation 6.5.1 and earlier, VMware Player 2.5.1 and earlier, VMware ACE 2.5.1 and earlier, and VMware Server 2.0.x before 2.0.1 build 156745 allows local users to gain privileges via unknown...

VMCI/HGFS VmWare Code Execution Vulnerability (Windows)

The host is installed with VMWare products that are vulnerable to arbitrary code execution. OpenVAS Vulnerability Test $Id: gbvmwareprdtsmultvulnwin.nasl 6518 2017-07-04 13:49:06Z cfischer $ VMCI/HGFS VmWare Code Execution Vulnerability Windows Authors: Chandan S Copyright: Copyright c 2008...

VMCI/HGFS VmWare Code Execution Vulnerability (VMSA-2008-0008) - Windows

VMWare products are prone to an arbitrary code execution vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

VMware VMCI功能任意代码执行漏洞

BUGTRAQ ID: 29443 CVECAN ID: CVE-2008-2099 VMWare是一款虚拟PC软件，允许在一台机器上同时运行两个或多个Windows、DOS、LINUX系统。 VMCI是VMware产品中的一个可选功能，允许虚拟机之间相互通讯。如果启用了VMCI功能的话，Guest就可以在主机上以vmx进程的权限执行任意指令。这个漏洞仅影响运行在Windows主机上的系统。 VMWare VMWare Workstation 6.x VMWare ACE 2.x VMWare Player 2.x VMWare Fusion 1.x VMWare ------...

VMware Products Multiple Vulnerabilities (VMSA-2008-0008)

A VMware product installed on the remote host is affected by multiple vulnerabilities : - A heap overflow vulnerability in VMware Host Guest File System HGFS, could allow a guest to execute arbitrary code subject to the privileges of the user running 'vmx' process. In order to successfully exploi...

CVE-2008-2099

CVE-2008-2099 is a VMware VMCI/HGFS code‑execution vulnerability affecting VMware Workstation 6.x (before 6.0.4 build 93057), VMware Player 2.x (before 2.0.4 build 93057), and VMware ACE 2.x (before 2.0.2 build 93057) on Windows. A guest OS user could potentially execute arbitrary code on the hos...

CVE-2008-2099

Unspecified vulnerability in VMCI in VMware Workstation 6 before 6.0.4 build 93057, VMware Player 2 before 2.0.4 build 93057, and VMware ACE 2 before 2.0.2 build 93057 on Windows allows guest OS users to execute arbitrary code on the host OS via unspecified vectors...

VMware产品多个安全漏洞

BUGTRAQ ID: 28289 CVECAN ID: CVE-2007-5618,CVE-2008-1364,CVE-2008-1340 VMWare是一款虚拟PC软件，允许在一台机器上同时运行两个或多个Windows、DOS、LINUX系统。 VMWare产品中存在多个安全漏洞，允许恶意的本地用户获得权限提升或导致拒绝服务。 在Windows 2000上运行的VMware产品产品可能错误的注册某些服务，允许用户获得权限提升。 运行在主机上的DHCP服务中存在拒绝服务漏洞；虚拟机通讯接口（VMCI）中存在内存破坏漏洞，如果对该接口执行了特殊的调用的话，就会耗尽内存，导致拒绝服务。...

CVE-2008-1340

Virtual Machine Communication Interface VMCI in VMware Workstation 6.0.x before 6.0.3, VMware Player 2.0.x before 2.0.3, and VMware ACE 2.0.x before 2.0.1 allows attackers to cause a denial of service host OS crash via crafted VMCI calls that trigger "memory exhaustion and memory corruption."...

CVE-2008-1340

VMware VMCI vulnerability CVE-2008-1340 affects VMware Workstation 6.0.x prior to 6.0.3, VMware Player 2.0.x prior to 2.0.3, and VMware ACE 2.0.x prior to 2.0.1. The issue allows attackers to cause a denial of service (host OS crash) via crafted VMCI calls that trigger memory exhaustion and memor...

CVE-2008-1340

Virtual Machine Communication Interface VMCI in VMware Workstation 6.0.x before 6.0.3, VMware Player 2.0.x before 2.0.3, and VMware ACE 2.0.x before 2.0.1 allows attackers to cause a denial of service host OS crash via crafted VMCI calls that trigger "memory exhaustion and memory corruption."...