VMware Player < 5.0.4 / 6.0.3 OpenSSL Library Multiple Vulnerabilities (Linux)

The version of VMware Player installed on the remote host is version 5.x prior to 5.0.4 or 6.x prior to 6.0.3. It is, therefore, affected by the following vulnerabilities in the OpenSSL library : - An error exists in the function 'ssl3readbytes' that could allow data to be injected into other...

VMware Player 1.0.1 Build 19317 Malformed VMX File Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/18515/info VMware Player is susceptible to a denial-of-service vulnerability. This issue is due to the application's failure to properly handle excessively long data. This issue allows remote attackers to cause affected...

VMware <= 2.5.1 (Vmware-authd) Remote Denial of Service Exploit

No description provided by source. --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- Vmware = 2.5.1 build-126130...

VMware Player 6.x < 6.0.2 Windows 8.1 Guest Privilege Escalation (VMSA-2014-0005) (Linux)

The installed version of VMware Player 6.x running on the remote Linux host is prior to 6.0.2. It is, therefore, reportedly affected by a privilege escalation vulnerability. A kernel NULL dereference flaw exists in VMware tools on Windows 8.1 guest hosts. An attacker could escalate his privileges...

CVE-2014-3793

VMware Tools in VMware Workstation 10.x before 10.0.2, VMware Player 6.x before 6.0.2, VMware Fusion 6.x before 6.0.3, and VMware ESXi 5.0 through 5.5, when a Windows 8.1 guest OS is used, allows guest OS users to gain guest OS privileges or cause a denial of service kernel NULL pointer dereferen...

PT-2014-1177

Name of the Vulnerable Software and Affected Versions VMware ESXi versions 5.0 through 5.5 VMware Workstation versions 10.x before 10.0.2 VMware Player versions 6.x before 6.0.2 VMware Fusion versions 6.x before 6.0.3 Description The issue allows an attacker, working in a guest OS Windows 8.1, to...

CVE-2014-3793: Undefined Security Weakness

VMware Tools in VMware Workstation 10.x before 10.0.2, VMware Player 6.x before 6.0.2, VMware Fusion 6.x before 6.0.3, and VMware ESXi 5.0 through 5.5, when a Windows 8.1 guest OS is used, allows guest OS users to gain guest OS privileges or cause a denial of service kernel NULL pointer dereferen...

CVE-2014-2384: Undefined Security Weakness

vmx86.sys in VMware Workstation 10.0.1 build 1379776 and VMware Player 6.0.1 build 1379776 on Windows might allow local users to cause a denial of service read access violation and system crash via a crafted buffer in an IOCTL call. NOTE: the researcher reports "Vendor rated issue as...

PT-2014-4670

Name of the Vulnerable Software and Affected Versions VMware Workstation version 10.0.1 build 1379776 VMware Player version 6.0.1 build 1379776 Description The issue allows local users to cause a denial of service, resulting in a read access violation and system crash, via a crafted buffer in an...

VMware Player 5.x < 5.0.1 VMX Process DoS (VMSA-2014-0001) (Linux)

The installed version of VMware Player 5.x running on the remote Linux host is a version prior to 5.0.1. It is, therefore, affected by a denial of service vulnerability due to an issue with handling invalid ports that could allow a guest user to crash the VMX process. C Tenable Network Security,...

VMware Player 5.x < 5.0.1 VMX Process DoS (VMSA-2014-0001)

The installed version of VMware Player 5.x running on the remote Windows host is a version prior to 5.0.1. It is, therefore, reportedly affected by a denial of service vulnerability due to an issue with handling invalid ports that could allow a guest user to crash the VMX process. C Tenable Netwo...

PT-2014-1710

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 9.x before 9.0.1 VMware Player versions 5.x before 5.0.1 VMware Fusion versions 5.x before 5.0.1 VMware ESXi versions 4.0 through 5.1 VMware ESX versions 4.0 and 4.1 Description The issue allows users of the guest...

CVE-2014-1208: Undefined Security Weakness

VMware Workstation 9.x before 9.0.1, VMware Player 5.x before 5.0.1, VMware Fusion 5.x before 5.0.1, VMware ESXi 4.0 through 5.1, and VMware ESX 4.0 and 4.1 allow guest OS users to cause a denial of service VMX process disruption by using an invalid port...

CVE-2013-3519

lgtosync.sys in VMware Workstation 9.x before 9.0.3, VMware Player 5.x before 5.0.3, VMware Fusion 5.x before 5.0.4, VMware ESXi 4.0 through 5.1, and VMware ESX 4.0 and 4.1, when a 32-bit Windows guest OS is used, allows guest OS users to gain guest OS privileges via an application that performs ...

VMSA-2013-0014 VMware Workstation, Fusion, ESXi and ESX patches address a guest privilege escalation (remote check)

VMware Workstation, Fusion, ESXi and ESX patches address a vulnerability in the LGTOSYNC.SYS driver which could result in a privilege escalation on older Windows-based Guest Operating Systems. OpenVAS Vulnerability Test $Id: gbVMSA-2013-0014remote.nasl 6093 2017-05-10 09:03:18Z teissa $...

PT-2013-4450

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 9.0.0 through 9.0.2 VMware Player versions 5.0.0 through 5.0.2 VMware Fusion versions 5.0.0 through 5.0.3 VMware ESXi versions 4.0 through 5.1 VMware ESX versions 4.0 and 4.1 Description The issue allows guest OS...

CVE-2013-3519: Undefined Security Weakness

lgtosync.sys in VMware Workstation 9.x before 9.0.3, VMware Player 5.x before 5.0.3, VMware Fusion 5.x before 5.0.4, VMware ESXi 4.0 through 5.1, and VMware ESX 4.0 and 4.1, when a 32-bit Windows guest OS is used, allows guest OS users to gain guest OS privileges via an application that performs ...

VMware Player for Linux Installed

Binary data vmwareplayerlinuxinstalled.nbin...

VMware Player 5.x < 5.0.3 Host Privilege Escalation (VMSA-2013-0013)

The installed version of VMware Player 5.x running on Linux is earlier than 5.0.3. It therefore reportedly contains a vulnerability in its handling of shared libraries. This issue may allow a local, malicious user to escalate privileges to root on the host. C Tenable Network Security, Inc...

PT-2013-5895

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 9.0.0 through 9.0.2 VMware Player versions 5.0.0 through 5.0.2 Description The issue arises from improper handling of shared libraries, allowing host OS users to gain host OS privileges. Recommendations For VMware...