CVE-2011-2146: Exposure of Sensitive Information to an Unauthorized Actor

mount.vmhgfs in the VMware Host Guest File System HGFS in VMware Workstation 7.1.x before 7.1.4, VMware Player 3.1.x before 3.1.4, VMware Fusion 3.1.x before 3.1.3, VMware ESXi 3.5 through 4.1, and VMware ESX 3.0.3 through 4.1 allows guest OS users to determine the existence of host OS files and...

CVE-2011-1787: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in mount.vmhgfs in the VMware Host Guest File System HGFS in VMware Workstation 7.1.x before 7.1.4, VMware Player 3.1.x before 3.1.4, VMware Fusion 3.1.x before 3.1.3, VMware ESXi 3.5 through 4.1, and VMware ESX 3.0.3 through 4.1 allows guest OS users to gain privileges on the gues...

PT-2011-3634

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 7.1.x through 7.1.3 VMware Player versions 3.1.x through 3.1.3 VMware Fusion versions 3.1.x through 3.1.2 VMware ESXi versions 3.5 through 4.1 VMware ESX versions 3.0.3 through 4.1 Description The issue allows guest...

VMware Workstation 'vmrun' Library Path Privilege Escalation Vulnerability (VMSA-2011-0006) - Linux

VMware Workstation is prone to a local privilege escalation vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2011-1126: Undefined Security Weakness

VMware vmrun, as used in VIX API 1.x before 1.10.3 and VMware Workstation 6.5.x and 7.x before 7.1.4 build 385536 on Linux, might allow local users to gain privileges via a Trojan horse shared library in an unspecified directory...

PT-2011-1001

Name of the Vulnerable Software and Affected Versions VMware VIX API versions prior to 1.10.3 VMware Workstation versions 6.5.x through 7.1.4 build 385536 Description The issue allows local users to potentially gain privileges via a Trojan horse shared library in an unspecified directory. This...

VMware Products Tools Local Privilege Escalation Vulnerability (Linux)

The host is installed with VMWare products tools local privilege escalation vulnerability. OpenVAS Vulnerability Test $Id: gbvmwareprdtstoolslocprevesclvulnlin.nasl 5388 2017-02-21 15:13:30Z teissa $ VMware Products Tools Local Privilege Escalation Vulnerability Linux Authors: Antu Sanadi...

VMware Products Memory Corruption and Buffer Overflow Vulnerability (Windows)

The host is installed with VMWare products and are prone to memory corruption and buffer overflow Vulnerability OpenVAS Vulnerability Test $Id: gbvmwareprdtsmemcorruptionnbofvulnwin.nasl 5388 2017-02-21 15:13:30Z teissa $ VMware Products Memory Corruption and Buffer Overflow Vulnerability Windows...

VMware Products Tools Local Privilege Escalation Vulnerability (Windows)

The host is installed with VMWare products tools local privilege escalation vulnerability. OpenVAS Vulnerability Test $Id: gbvmwareprdtstoolslocprevesclvulnwin.nasl 5388 2017-02-21 15:13:30Z teissa $ VMware Products Tools Local Privilege Escalation Vulnerability Windows Authors: Antu Sanadi...

VMware Products Multiple Local Privilege Escalation Vulnerabilities (Linux)

The host is installed with VMWare products multiple local privilege escalation Vulnerabilities. OpenVAS Vulnerability Test $Id: gbvmwareprdtsmultlocprevesclvulnlin.nasl 5388 2017-02-21 15:13:30Z teissa $ VMware Products Multiple Local Privilege Escalation Vulnerabilities Linux Authors: Antu Sanad...

Memory corruption

The frame decompression functionality in the VMnc media codec in VMware Movie Decoder before 6.5.5 build 328052 and 7.x before 7.1.2 build 301548, VMware Workstation 6.5.x before 6.5.5 build 328052 and 7.x before 7.1.2 build 301548 on Windows, VMware Player 2.5.x before 2.5.5 build 246459 and 3.x...

Design/Logic Flaw

vmware-mount in VMware Workstation 7.x before 7.1.2 build 301548 on Linux, VMware Player 3.1.x before 3.1.2 build 301548 on Linux, VMware Server 2.0.2 on Linux, and VMware Fusion 3.1.x before 3.1.2 build 332101 does not properly load libraries, which allows host OS users to gain privileges via...

CVE-2010-4295

CVE-2010-4295 describes a race condition in the mounting process of vmware-mount that could allow a local host user to gain privileges via temporary files. Affected products include VMware Workstation 7.x (before 7.1.2 on Linux), VMware Player 3.1.x (before 3.1.2 on Linux), VMware Server 2.0.2 (L...

CVE-2010-4296: Incorrect Authorization

vmware-mount in VMware Workstation 7.x before 7.1.2 build 301548 on Linux, VMware Player 3.1.x before 3.1.2 build 301548 on Linux, VMware Server 2.0.2 on Linux, and VMware Fusion 3.1.x before 3.1.2 build 332101 does not properly load libraries, which allows host OS users to gain privileges via...

PT-2010-5404 · Vmware · Vmware Server +3

Name of the Vulnerable Software and Affected Versions: VMware Workstation versions 7.0 through 7.1.2 build 301547 VMware Player versions 3.1.x through 3.1.1 build 301547 VMware Server version 2.0.2 VMware Fusion versions 3.1.x through 3.1.1 build 332100 Description: The issue is related to the...

PT-2010-5402

Name of the Vulnerable Software and Affected Versions VMware Movie Decoder versions prior to 6.5.5 build 328052 and prior to 7.1.2 build 301548 VMware Workstation versions prior to 6.5.5 build 328052 and prior to 7.1.2 build 301548 VMware Player versions prior to 2.5.5 build 246459 and prior to...

VMSA-2010-0018 VMware hosted products and ESX patches resolve multiple security issues

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ VMware Security Advisory Advisory ID: VMSA-2010-0018 Synopsis: VMware hosted products and ESX patches resolve multiple security issues Issue date: 2010-12-02 Updated on:...

PT-2010-5405

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 6.5.x through 6.5.4 VMware Workstation versions 7.x through 7.1.1 VMware Player versions 2.5.x through 2.5.4 VMware Player versions 3.1.x through 3.1.1 VMware Server version 2.0.2 VMware Fusion versions 2.x through...

CVE-2010-4297: Improper Input Validation

The VMware Tools update functionality in VMware Workstation 6.5.x before 6.5.5 build 328052 and 7.x before 7.1.2 build 301548; VMware Player 2.5.x before 2.5.5 build 328052 and 3.1.x before 3.1.2 build 301548; VMware Server 2.0.2; VMware Fusion 2.x before 2.0.8 build 328035 and 3.1.x before 3.1.2...

CVE-2010-4295: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in the mounting process in vmware-mount in VMware Workstation 7.x before 7.1.2 build 301548 on Linux, VMware Player 3.1.x before 3.1.2 build 301548 on Linux, VMware Server 2.0.2 on Linux, and VMware Fusion 3.1.x before 3.1.2 build 332101 allows host OS users to gain privileges via...