VMware PF异常本地权限提升漏洞

BUGTRAQ ID: 36841 CVECAN ID: CVE-2009-2267 VMWare是一款虚拟PC软件，允许在一台机器上同时运行两个或多个Windows、DOS、LINUX系统。 在受保护的模式中，cpl通常等于cs寄存器最不重要的两位，但也有一个例外：在Virtual-8086模式中，无论cs寄存器为何值cpl总是为 3（最少权限）。当处理器出现PF异常时，会向包含有标记的栈上Push一个异常代码，操作系统使用这个标记确定正确地操作阶段。其中的一个标记为 U/S（user/supervisor），当处理器处于用户态时出现错误会设置这个标记。...

VMware Virtual 8086 - Linux Local Ring0

Bugtraq ID: 36841 Class: Design Error Published: Oct 27 2009 12:00AM Updated: Oct 27 2009 09:18PM Credit: Tavis Ormandy and Julien Tinnes of the Google Security Team Vulnerable: VMWare Workstation 6.5.3 VMWare Workstation 6.5.2 build 156735 VMWare Workstation 6.5.2 VMWare Workstation 6.5.1 VMWare...

CVE-2009-3282

Integer overflow in the vmx86 kernel extension in VMware Fusion before 2.0.6 build 196839 allows host OS users to cause a denial of service to the host OS via unspecified vectors...

CVE-2009-3281

The vmx86 kernel extension in VMware Fusion before 2.0.6 build 196839 does not use correct file permissions, which allows host OS users to gain privileges on the host OS via unspecified vectors...

Integer overflow

Integer overflow in the vmx86 kernel extension in VMware Fusion before 2.0.6 build 196839 allows host OS users to cause a denial of service to the host OS via unspecified vectors...

Code injection

The vmx86 kernel extension in VMware Fusion before 2.0.6 build 196839 does not use correct file permissions, which allows host OS users to gain privileges on the host OS via unspecified vectors...

CVE-2009-3282

Integer overflow in the vmx86 kernel extension in VMware Fusion before 2.0.6 build 196839 allows host OS users to cause a denial of service to the host OS via unspecified vectors...

CVE-2009-3282

Summary of findings (CVE-2009-3282 and related CVE-2009-3281) : VMware Fusion before 2.0.6 (build 196839) is affected by two issues in the vmx86 kernel extension. CVE-2009-3282 is an integer overflow that allows an unprivileged user on the host to cause a denial of service. CVE-2009-3281 is a ker...

CVE-2009-3281

Summary (CVE-2009-3281 / CVE-2009-3282 in VMware Fusion) VMware Fusion 2.0.5 and earlier are affected by two kernel issues in the vmx86 extension: CVE-2009-3281 (file-permission problem enabling arbitrary code execution in host kernel context by an unprivileged user) and CVE-2009-3282 (integer ov...

CVE-2009-3281

The vmx86 kernel extension in VMware Fusion before 2.0.6 build 196839 does not use correct file permissions, which allows host OS users to gain privileges on the host OS via unspecified vectors...

CVE-2009-3281: Undefined Security Weakness

The vmx86 kernel extension in VMware Fusion before 2.0.6 build 196839 does not use correct file permissions, which allows host OS users to gain privileges on the host OS via unspecified vectors...

CVE-2009-3282: Undefined Security Weakness

Integer overflow in the vmx86 kernel extension in VMware Fusion before 2.0.6 build 196839 allows host OS users to cause a denial of service to the host OS via unspecified vectors...

VMWare Fusion本地拒绝服务和权限提升漏洞

BUGTRAQ ID: 36579,36578 CVE ID: CVE-2009-3282,CVE-2009-3281 VMWare Fusion允许在基于Intel的Mac机器上无缝的运行Windows应用程序。 VMWare Fusion的vmx86内核扩展中存在文件权限漏洞和整数溢出漏洞，本地非特权用户可以利用这些漏洞在主机系统上执行任意内核态代码或导致拒绝服务。 VMWare Fusion 2.0 厂商补丁： VMWare ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.vmware.com / vmware-pop.c...

VMSA-2009-0013 VMware Fusion resolves two security issues

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ VMware Security Advisory Advisory ID: VMSA-2009-0013 Synopsis: VMware Fusion resolves two security issues Issue date: 2009-10-01 Updated on: 2009-10-01 initial release of...

VMware Fusion 2.0.5 - vmx86 kext Local Buffer Overflow (PoC)

VMware Fusion 2.0.5 - vmx86 kext Local Buffer Overflow PoC / vmware-pop.c Copyright c 2009 by VMware Fusion include include include include include define VMX86IOCTL 0x80045643 struct ioctlreq struct ioctlreqbuf uaddr; ; struct ioctlreqbuf char pad0x8; int len; char pad0xC; ; int main int argc,...

VMware Fusion 2.0.5 - vmx86 kext Kernel Privilege Escalation

VMware Fusion 2.0.5 - vmx86 kext Kernel Privilege Escalation / vmware-fission.c Copyright c 2009 by VMware Fusion include include include include include include include include include ifndef IOCPARMMASK define IOCPARMMASK 0x1FFF endif ifndef IOCPARMLEN define IOCPARMLENa a 16 & IOCPARMMASK endi...

VMWare Fusion <= 2.0.5 vmx86 kext local PoC

Exploit for unknown platform in category local exploits =========================================== VMWare Fusion include include include include include define VMX86IOCTL 0x80045643 struct ioctlreq struct ioctlreqbuf uaddr; ; struct ioctlreqbuf char pad0x8; int len; char pad0xC; ; int main int...

VMware Fusion 2.0.5 - vmx86 kext Local Buffer Overflow (PoC)

/ vmware-pop.c Copyright c 2009 by VMware Fusion include include include include include define VMX86IOCTL 0x80045643 struct ioctlreq struct ioctlreqbuf uaddr; ; struct ioctlreqbuf char pad0x8; int len; char pad0xC; ; int main int argc, char argv struct ioctlreq req; struct ioctlreqbuf buf; int f...

VMware Fusion < 2.0.6 (VMSA-2009-0013)

The version of VMware Fusion installed on the Mac OS X host is earlier than 2.0.6. Such versions are affected by two security issues : - A vulnerability in the vmx86 kernel extension allows an unprivileged userland program to initialize several function pointers via the '0x802E564A' IOCTL code,...

VMWare Fusion <= 2.0.5 vmx86 kext local kernel root exploit

Exploit for unknown platform in category local exploits =========================================================== VMWare Fusion include include include include include include include mach/...