VMware Workstation 11.x < 11.1.2 Shared Folders (HGFS) Guest Privilege Escalation (VMSA-2016-0001)

The version of VMware Workstation installed on the remote host is 11.x prior to 11.1.2. It is, therefore, affected by a guest privilege escalation vulnerability in the Shared Folders HGFS feature due to improper validation of user-supplied input. A local attacker can exploit this to corrupt memor...

CVE-2015-6933

CVE-2015-6933 affects VMware Tools HGFS across VMware Workstation (11.x prior to 11.1.2), VMware Player (7.x prior to 7.1.2), VMware Fusion (7.x prior to 7.1.2), and VMware ESXi (5.0–6.0). Root cause: HGFS/shared folders component vulnerability leading to guest OS privilege escalation or guest ke...

CVE-2015-6933: Improper Access Control

The VMware Tools HGFS aka Shared Folders implementation in VMware Workstation 11.x before 11.1.2, VMware Player 7.x before 7.1.2, VMware Fusion 7.x before 7.1.2, and VMware ESXi 5.0 through 6.0 allows Windows guest OS users to gain guest OS privileges or cause a denial of service guest OS kernel...

PT-2016-3731

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 11.0 through 11.1.1 VMware Player versions 7.0 through 7.1.1 VMware Fusion versions 7.0 through 7.1.1 VMware ESXi versions 5.0 through 6.0 Description The issue allows Windows guest OS users to gain guest OS...

Multiple VMware Product Host Elevation of Privilege Vulnerabilities

VMware Workstation, VMware Player are virtual machine software.VMware Horizon Client is a device that provides access to VMware Horizon desktops from any location. The vmware-vmx.exe file in multiple VMware products fails to properly set the DACL of a process, allowing a local attacker to exploit...

PT-2015-6256

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 7.x through 10.x before 10.0.7 VMware Workstation versions 11.x before 11.1.1 VMware Player versions 5.x and 6.x before 6.0.7 VMware Player versions 7.x before 7.1.1 VMware Horizon Client versions 5.x local-mode...

CVE-2015-3650: Improper Access Control

vmware-vmx.exe in VMware Workstation 7.x through 10.x before 10.0.7 and 11.x before 11.1.1, VMware Player 5.x and 6.x before 6.0.7 and 7.x before 7.1.1, and VMware Horizon Client 5.x local-mode before 5.4.2 on Windows does not provide a valid DACL pointer during the setup of the vprintproxy.exe...

The vulnerability of the VMware Workstation hypervisor allows a attacker to cause a failure in the guest or host operating system.

The vulnerability of VMware Workstation exists due to insufficient verification of input data. Exploiting this vulnerability can allow an attacker to cause a failure in the maintenance of 32-bit or 64-bit host operating systems using a specially crafted RPC request...

MS15-034 HTTP Protocol Stack Request Handling HTTP.SYS Memory Information Disclosure

This module dumps memory contents using a crafted Range header and affects only Windows 8.1, Server 2012, and Server 2012R2. Note that if the target is running in VMware Workstation, this module has a high likelihood of resulting in BSOD; however, VMware ESX and non-virtualized hosts seem stable...

VMware Workstation 10.x < 10.0.6 RPC Command DoS (VMSA-2015-0004) (Linux)

The version of VMware Workstation installed on the remote Linux host is 10.x prior to 10.0.6. It is, therefore, affected by a denial of service vulnerability due to improper validation of user-supplied input to a remote procedure call RPC command. An unauthenticated, remote attacker can exploit...

Design/Logic Flaw

TPview.dll in VMware Workstation 10.x before 10.0.6 and 11.x before 11.1.1, VMware Player 6.x before 6.0.6 and 7.x before 7.1.1, and VMware Horizon Client 3.2.x before 3.2.1, 3.3.x, and 5.x local-mode before 5.4.2 on Windows does not properly allocate memory, which allows guest OS users to cause ...

Design/Logic Flaw

TPInt.dll in VMware Workstation 10.x before 10.0.6 and 11.x before 11.1.1, VMware Player 6.x before 6.0.6 and 7.x before 7.1.1, and VMware Horizon Client 3.2.x before 3.2.1, 3.3.x, and 5.x local-mode before 5.4.2 on Windows does not properly allocate memory, which allows guest OS users to execute...

CVE-2015-2336

CVE-2015-2336 affects VMware products on Windows: TPView.dll/TPInt.dll memory allocation issues in VMware Workstation 10.x before 10.0.6 and 11.x before 11.1.1, VMware Player 6.x before 6.0.6 and 7.x before 7.1.1, and VMware Horizon Client 3.2.x before 3.2.1, 3.3.x, and 5.x local-mode before 5.4....

PT-2015-1428

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 10.0.0 through 10.0.5 VMware Workstation versions 11.0.0 through 11.0.0 VMware Player versions 6.0.0 through 6.0.5 VMware Player versions 7.0.0 through 7.0.0 VMware Horizon Client versions 3.2.0 through 3.2.0 VMware...

PT-2015-1323

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 10.x through 10.0.4 VMware Player versions 6.x through 6.0.5 VMware Fusion versions 6.x through 6.0.5 and versions 7.x through 7.0.0 Description The issue exists due to insufficient input validation in the hyperviso...

CVE-2015-2341: Improper Input Validation

VMware Workstation 10.x before 10.0.5, VMware Player 6.x before 6.0.6, and VMware Fusion 6.x before 6.0.6 and 7.x before 7.0.1 allow attackers to cause a denial of service against a 32-bit guest OS or 64-bit host OS via a crafted RPC command...

CVE-2015-2340: Undefined Security Weakness

TPInt.dll in VMware Workstation 10.x before 10.0.6 and 11.x before 11.1.1, VMware Player 6.x before 6.0.6 and 7.x before 7.1.1, and VMware Horizon Client 3.2.x before 3.2.1, 3.3.x, and 5.x local-mode before 5.4.2 on Windows does not properly allocate memory, which allows guest OS users to cause a...

CVE-2015-2338: Undefined Security Weakness

TPview.dll in VMware Workstation 10.x before 10.0.6 and 11.x before 11.1.1, VMware Player 6.x before 6.0.6 and 7.x before 7.1.1, and VMware Horizon Client 3.2.x before 3.2.1, 3.3.x, and 5.x local-mode before 5.4.2 on Windows does not properly allocate memory, which allows guest OS users to cause ...

CVE-2015-2336: Undefined Security Weakness

TPView.dll in VMware Workstation 10.x before 10.0.6 and 11.x before 11.1.1, VMware Player 6.x before 6.0.6 and 7.x before 7.1.1, and VMware Horizon Client 3.2.x before 3.2.1, 3.3.x, and 5.x local-mode before 5.4.2 on Windows does not properly allocate memory, which allows guest OS users to execut...

PT-2015-1427

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 10.x through 10.0.5 and 11.x through 11.1.0 VMware Player versions 6.x through 6.0.5 and 7.x through 7.1.0 VMware Horizon Client versions 3.2.x through 3.2.0, 3.3.x, and 5.x local-mode through 5.4.1 Description The...