CVE-2016-5330

Untrusted search path vulnerability in the HGFS aka Shared Folders feature in VMware Tools 10.0.5 in VMware ESXi 5.0 through 6.0, VMware Workstation Pro 12.1.x before 12.1.1, VMware Workstation Player 12.1.x before 12.1.1, and VMware Fusion 8.1.x before 8.1.1 allows local users to gain privileges...

Design/Logic Flaw

Untrusted search path vulnerability in the HGFS aka Shared Folders feature in VMware Tools 10.0.5 in VMware ESXi 5.0 through 6.0, VMware Workstation Pro 12.1.x before 12.1.1, VMware Workstation Player 12.1.x before 12.1.1, and VMware Fusion 8.1.x before 8.1.1 allows local users to gain privileges...

PT-2016-6367

Name of the Vulnerable Software and Affected Versions VMware ESXi versions 5.0 through 6.0 VMware Tools version 10.0.5 VMware Workstation Pro versions 12.1.x before 12.1.1 VMware Workstation Player versions 12.1.x before 12.1.1 VMware Fusion versions 8.1.x before 8.1.1 Description The issue allow...

KLA10854 Privileges escalation vulnerabilities in VMware products

Untrusted search path vulnerability was found in VMware products. By exploiting this vulnerability malicious users can gain privileges. This vulnerability can be exploited locally via DLL hijack. Technical details This vulnerability related to HGFS aka Shared Folders feature. Original advisories...

The vulnerability of VMware Fusion’s hypervisor allows a attacker to trigger a failure in the hosting or host operating system.

The vulnerability of VMware Fusion exists due to insufficient verification of input data. Exploiting this vulnerability can allow an attacker to cause a failure in the maintenance of 32-bit or 64-bit host operating systems using a specially crafted RPC request...

The vulnerability of VMware Fusion allows users of the guest operating system to execute code on the host operating system.

The vulnerability of the TPInt.dll library in VMware Fusion’s hypervisor is related to resource management errors. Exploiting this vulnerability allows users of the guest operating system to execute code on the host operating system...

The vulnerability of VMware Fusion’s hypervisor allows users of the guest operating system to trigger a failure in the maintenance of the host operating system.

The vulnerability of the TPView.dll library in VMware Fusion involves resource management errors. Exploiting this vulnerability can allow users of the guest operating system to cause failures in the host operating system...

The vulnerability of VMware Fusion allows users of the guest operating system to execute code on the host operating system.

The vulnerability of the TPView.dll library in VMware Fusion relates to resource management errors. Exploiting this vulnerability allows users of the guest operating system to execute code on the host operating system...

The vulnerability of VMware Fusion’s hypervisor allows users of the guest operating system to trigger a failure in the maintenance of the host operating system.

The vulnerability of the TPInt.dll library in VMware Fusion’s hypervisor is related to resource management errors. Exploiting this vulnerability can allow users of the guest operating system to cause failures in the host operating system...

The vulnerability of VMware Fusion’s hypervisor allows users of the guest operating system to trigger a failure in the maintenance of the host operating system.

The vulnerability of the TPView.dll library in VMware Fusion involves resource management errors. Exploiting this vulnerability can allow users of the guest operating system to cause failures in the host operating system...

The vulnerability of VMWare Workstation’s software allows a malicious individual to compromise the accessibility of protected information.

The vulnerability in VMware Workstation, VMware Player, VMware Fusion, VMware ESXi, and VMware ESX allows users of these guest operating systems to trigger a service failure VMX process crash by using an invalid port...

VMware Fusion Privilege Escalation Vulnerability (May 2016) - Mac OS X

VMware Fusion is prone to host privilege escalation vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:vmware:fusion"...

VMware Fusion HGFS Denial of Service Vulnerability (May 2016) - Mac OS X

VMware Fusion is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:vmware:fusion";...

VMware Fusion 7.x < 7.1.2 Shared Folders (HGFS) Guest Privilege Escalation (VMSA-2016-0001)

The version of VMware Fusion installed on the remote Mac OS X host is 7.x prior to 7.1.2. It is, therefore, affected by a guest privilege escalation vulnerability in the Shared Folders HGFS feature due to improper validation of user-supplied input. A local attacker can exploit this to corrupt...

CVE-2015-6933

CVE-2015-6933 affects VMware Tools HGFS across VMware Workstation (11.x prior to 11.1.2), VMware Player (7.x prior to 7.1.2), VMware Fusion (7.x prior to 7.1.2), and VMware ESXi (5.0–6.0). Root cause: HGFS/shared folders component vulnerability leading to guest OS privilege escalation or guest ke...

CVE-2015-6933: Improper Access Control

The VMware Tools HGFS aka Shared Folders implementation in VMware Workstation 11.x before 11.1.2, VMware Player 7.x before 7.1.2, VMware Fusion 7.x before 7.1.2, and VMware ESXi 5.0 through 6.0 allows Windows guest OS users to gain guest OS privileges or cause a denial of service guest OS kernel...

PT-2016-3731

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 11.0 through 11.1.1 VMware Player versions 7.0 through 7.1.1 VMware Fusion versions 7.0 through 7.1.1 VMware ESXi versions 5.0 through 6.0 Description The issue allows Windows guest OS users to gain guest OS...

PT-2015-1323

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 10.x through 10.0.4 VMware Player versions 6.x through 6.0.5 VMware Fusion versions 6.x through 6.0.5 and versions 7.x through 7.0.0 Description The issue exists due to insufficient input validation in the hyperviso...

CVE-2015-2341: Improper Input Validation

VMware Workstation 10.x before 10.0.5, VMware Player 6.x before 6.0.6, and VMware Fusion 6.x before 6.0.6 and 7.x before 7.0.1 allow attackers to cause a denial of service against a 32-bit guest OS or 64-bit host OS via a crafted RPC command...

PT-2015-1430

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 10.0.0 through 10.0.5 VMware Workstation versions 11.0.0 through 11.1.0 VMware Player versions 6.0.0 through 6.0.5 VMware Player versions 7.0.0 through 7.1.0 VMware Horizon Client versions 3.2.0 through 3.2.0 VMware...