CVE-2017-4948

VMware Workstation 14.x before 14.1.0 and 12.x and Horizon View Client 4.x before 4.7.0 contain an out-of-bounds read vulnerability in TPView.dll. On Workstation, this issue in conjunction with other bugs may allow a guest to leak information from host or may allow for a Denial of Service on the...

Out-of-bounds

VMware Workstation 14.x before 14.1.0 and 12.x and Horizon View Client 4.x before 4.7.0 contain an out-of-bounds read vulnerability in TPView.dll. On Workstation, this issue in conjunction with other bugs may allow a guest to leak information from host or may allow for a Denial of Service on the...

CVE-2017-4948

VMware Workstation 14.x before 14.1.0 and 12.x and Horizon View Client 4.x before 4.7.0 contain an out-of-bounds read vulnerability in TPView.dll. On Workstation, this issue in conjunction with other bugs may allow a guest to leak information from host or may allow for a Denial of Service on the...

VMware Workstation ALSA Config File Local Privilege Escalation

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'VMware Workstation ALSA Config File Local Privilege Escalation', 'Description' = %q This module exploits a vulnerability in VMware Workstation Pr...

VMware Workstation - ALSA Config File Local Privilege Escalation (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'VMware Workstation ALSA Config File Local Privilege Escalation', 'Description' = %q This module exploits a vulnerability in VMware Workstation Pr...

KLA11175 DoS and ACE vulnerabilities in VMware Products

Multiple serious vulnerabilities have been found in VMware Products. Malicious users can exploit these vulnerabilities to cause denial of service and execute arbitrary code. Below is a complete list of vulnerabilities: 1. An out-of-bounds read vulnerability in TPView.dll can be exploited remotely...

VMware Workstation 12.x < 12.5.8 Multiple Vulnerabilities (VMSA-2017-0021) (VMSA-2018-0002) (Spectre)

The version of VMware Workstation installed on the remote Windows host is 12.x prior to 12.5.8. It is, therefore, affected by multiple vulnerabilities that can allow code execution in a virtual machine via the authenticated VNC session as well as cause information disclosure from one virtual...

Heap Overflow Vulnerability in Multiple Vmware Products

VMware ESXi, Workstation, and Fusion are all products of VMware, Inc. VMware ESXi is a server virtualization platform that can be installed directly on physical servers; VMware Workstation is a suite of virtual machine software; and Fusion is a suite of virtual machine software that is designed t...

VMware Workstation 12.x < 12.5.8 Multiple Vulnerabilities (VMSA-2017-0018)

The version of VMware Workstation installed on the remote Windows host is 12.x prior to 12.5.8. It is, therefore, affected by multiple vulnerabilities including arbitrary code execution and a local DoS. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid104853;...

VMware Workstation NAT IP Fragment Reassembly Heap-based Buffer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to execute arbitrary code on vulnerable installations of VMware Workstation. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling...

VMWare Workstation and Horizon View Client for Windows JPEG2000 Parser Arbitrary Code Execution Vulnerability (CNVD-2017-37489)

VMWare Workstation for Windows and Horizon View Client for Windows are both products of VMware, a Windows-based desktop virtualization software; the latter is a Windows-based client for accessing VMware Horizon desktops from any location. The former is a set of Windows-based desktop virtualizatio...

VMWare Workstation and Horizon View Client for Windows JPEG2000 Parser Arbitrary Code Execution Vulnerability (CNVD-2017-37491)

VMWare Workstation for Windows and Horizon View Client for Windows are both products of VMware, a Windows-based desktop virtualization software; the latter is a Windows-based client for accessing VMware Horizon desktops from any location. The former is a set of Windows-based desktop virtualizatio...

VMWare Workstation and Horizon View Client for Windows JPEG2000 Parser Arbitrary Code Execution Vulnerability

VMWare Workstation for Windows and Horizon View Client for Windows are both products of VMware, a Windows-based desktop virtualization software; the latter is a Windows-based client for accessing VMware Horizon desktops from any location. The former is a set of Windows-based desktop virtualizatio...

VMware Workstation and Fusion Heap Buffer Overflow Vulnerability

VMWare Workstation and Fusion are both desktop virtual computer software from VMware. The former provides virtual machine functionality that allows you to run several different operating systems at the same time, while the latter is virtual machine software used to run Windows applications on App...

VMware Workstation DLL Hijacking Vulnerability

VMWare Workstation is a suite of desktop virtualization software from VMware. The software provides the ability to run multiple virtual machines with different operating systems at the same time. installer is one of the installation programs. A DLL hijacking vulnerability exists in the installer ...

CVE-2017-4939

VMware Workstation 12.x before 12.5.8 installer contains a DLL hijacking issue that exists due to some DLL files loaded by the application improperly. This issue may allow an attacker to load a DLL file of the attacker's choosing that could execute arbitrary code...

CVE-2017-4939

VMware Workstation 12.x before 12.5.8 installer contains a DLL hijacking issue that exists due to some DLL files loaded by the application improperly. This issue may allow an attacker to load a DLL file of the attacker's choosing that could execute arbitrary code...

Code injection

VMware Workstation 12.x before 12.5.8 installer contains a DLL hijacking issue that exists due to some DLL files loaded by the application improperly. This issue may allow an attacker to load a DLL file of the attacker's choosing that could execute arbitrary code...

CVE-2017-4939

VMware Workstation 12.x before 12.5.8 installer contains a DLL hijacking issue that exists due to some DLL files loaded by the application improperly. This issue may allow an attacker to load a DLL file of the attacker's choosing that could execute arbitrary code...

CVE-2017-4936

VMware Workstation 12.x before 12.5.8 and Horizon View Client for Windows 4.x before 4.6.1 contain an out-of-bounds read vulnerability in JPEG2000 parser in the TPView.dll. On Workstation, this may allow a guest to execute code or perform a Denial of Service on the Windows OS that runs Workstatio...