Multiple Read/Write Vulnerabilities in VMware Workstation and Horizon View Client (CNVD-2017-05881)

VMware Workstation is a paid and feature-rich set of virtual machine software.VMware Workstation Player is a free open source and simpler virtual machine software.Horizon Client for Windows is used to virtualize desktops and applications. VMware Workstation and Horizon View Client have multiple...

Multiple heap buffer overflow vulnerabilities in VMware Workstation and Horizon View Client (CNVD-2017-05880)

VMware Workstation is a paid and feature-rich set of virtual machine software.VMware Workstation Player is a free open source and simpler virtual machine software.Horizon Client for Windows is used to virtualize desktops and applications. VMware Workstation and Horizon View Client have multiple...

Multiple Heap Buffer Overflow Vulnerabilities in VMware Workstation and Horizon View Client

VMware Workstation is a paid and feature-rich set of virtual machine software.VMware Workstation Player is a free open source and simpler virtual machine software.Horizon Client for Windows is used to virtualize desktops and applications. VMware Workstation and Horizon View Client have multiple...

VMware Workstation and Horizon Client Integer Overflow Vulnerability

VMware Workstation is a paid and feature-rich set of virtual machine software.VMware Workstation Player is a free open source and simpler virtual machine software.Horizon Client for Windows is used to virtualize desktops and applications. VMware Workstation and Horizon Client have an integer...

(Pwn2Own) VMware Workstation Uninitialized Memory Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on vulnerable installations of VMware Workstation. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

VMware Workstation SVGA Heap-based Buffer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to execute arbitrary code on vulnerable installations of VMware Workstation. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling...

(Pwn2Own) VMware Workstation Uninitialized Memory Privilege Escalation Vulnerability

This vulnerability allows local attackers to execute arbitrary code on vulnerable installations of VMware Workstation. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling...

VMware Workstation 12.x < 12.5.5 Multiple Vulnerabilities (VMSA-2017-0006) (Linux)

The version of VMware Workstation installed on the remote Linux host is 12.x prior to 12.5.5. It is, therefore, affected by multiple vulnerabilities : - A heap buffer overflow condition exists due to improper validation of certain input. An attacker on the guest can exploit this to cause a denial...

(Pwn2Own) VMware Workstation SVGA Uninitialized Memory Privilege Escalation Vulnerability

This vulnerability allows local attackers to execute arbitrary code on vulnerable installations of VMware Workstation. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling...

VMware Workstation 12.x < 12.5.4 Drag-and-Drop Feature Guest-to-Host Code Execution (VMSA-2017-0005) (Linux)

The version of VMware Workstation installed on the remote Linux host is 12.x prior to 12.5.4. It is, therefore, affected by a guest-to-host arbitrary code execution vulnerability in the drag-and-drop DND functionality due to an out-of-bounds memory access error. An attacker within a guest can...

Multiple VMware Workstation Product DLL Load Remote Code Execution Vulnerability

VMware Workstation is a virtual machine software product from VMware. A DLL loading remote code execution vulnerability exists in multiple VMware Workstation products. An attacker can exploit this vulnerability to execute arbitrary code with elevated privileges, and a failed attack could result i...

Multiple VMware Workstation Product Out-of-Bounds Read Denial of Service Vulnerabilities

VMware Workstation is a virtual machine software product from VMware. An out-of-bounds read denial of service vulnerability exists in multiple VMware Workstation products. An attacker could exploit this vulnerability to crash a virtual machine, resulting in a denial of service...

SUSE SLES11 Security Update : open-vm-tools (SUSE-SU-2017:0705-1)

This update for open-vm-tools to 10.1.0 stable brings features, fixes bugs and security issues : - New vmware-namespace-cmd command line utility - GTK3 support - Common Agent Framework CAF - Guest authentication with xmlsec1 - Sub-command to push updated network information to the host on demand ...

Multiple VMware Workstation Product Denial of Service Vulnerabilities

VMware Workstation is a virtual machine software product from VMware. A denial of service vulnerability exists in multiple VMware Workstation products. A remote attacker could exploit the vulnerability to submit a special request that would crash the application...

VMSA-2017-0005:VMware Workstation and Fusion updates address out-of-bounds memory access vulnerability

VMSA-2017-0005 VMware Workstation and Fusion updates address out-of-bounds memory access vulnerability VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2017-0005 VMware Security Advisory Severity: Critical VMware Security Advisory Synopsis: VMware Workstation and Fusion updates...

VMware Workstation Invalid DACL Privilege Escalation Vulnerability - Windows

VMware Workstation is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

VMware Workstation Code Execution And Privilege Escalation Vulnerabilities (VMSA-2012-0015) - Windows

VMware Workstation is prone to code execution and privilege escalation vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

VMware Workstation Player 'DnD' Out-of-Bounds Access Vulnerability - Windows

VMware Workstation Player is prone to an out-of-bounds memory access vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

VMware Workstation Insecure 'tpfc.dll' Code Execution Vulnerability - Windows

VMware Workstation is prone to a code execution vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:vmware:workstation...

VMware Workstation Insecure 'tpfc.dll' Code Execution Vulnerability - Linux

VMware Workstation is prone to a code execution vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:vmware:workstation...