CVE-2013-5972: Undefined Security Weakness

VMware Workstation 9.x before 9.0.3 and VMware Player 5.x before 5.0.3 on Linux do not properly handle shared libraries, which allows host OS users to gain host OS privileges via unspecified vectors...

NEW VMSA-2013-0010 VMware Workstation host privilege escalation vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ----------------------------------------------------------------------- VMware Security Advisory Advisory ID: VMSA-2013-0010 Synopsis: VMware Workstation host privilege escalation vulnerability Issue date: 2013-08-22 Updated on: 2013-08-22 initial...

PT-2013-3302

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 8.x through 9.x VMware Player versions 4.x through 5.x Description The issue allows host OS users to gain host OS privileges via a crafted lsb release binary in a directory in the PATH, related to the use of the pop...

CVE-2013-1662: Undefined Security Weakness

vmware-mount in VMware Workstation 8.x and 9.x and VMware Player 4.x and 5.x, on systems based on Debian GNU/Linux, allows host OS users to gain host OS privileges via a crafted lsbrelease binary in a directory in the PATH, related to use of the popen library function...

VMware Player 4.x < 4.0.5 Multiple Vulnerabilities (VMSA-2012-0015)

The VMware Player 4.x install detected on the remote host is earlier than 4.0.5 and is, therefore, potentially affected by the following vulnerabilities : - Certain processes, when created, have weak security permissions assigned. It is possible to commandeer these process threads, which could...

[VMInjector] DLL Injection tool to unlock guest VMs

Overview: VMInjector is a tool designed to bypass OS login authentication screens of major operating systems running on VMware Workstation/Player, by using direct memory manipulation. Description: VMInjector is a tool which manipulates the memory of VMware guests in order to bypass the operation...

PT-2012-4818

Name of the Vulnerable Software and Affected Versions VMware OVF Tool version 2.1 VMware Workstation versions 8.0 through 8.0.4 VMware Player versions 4.0 through 4.0.4 Description A format string issue allows user-assisted remote attackers to execute arbitrary code via a crafted OVF file...

PT-2012-5983

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 8.0.0 through 8.0.4 VMware Player versions 4.0.0 through 4.0.4 Description The issue allows host OS users to gain host OS privileges via a Trojan horse DLL in a "system folder" due to an untrusted search path...

CVE-2012-5459: Undefined Security Weakness

Untrusted search path vulnerability in VMware Workstation 8.x before 8.0.5 and VMware Player 4.x before 4.0.5 on Windows allows host OS users to gain host OS privileges via a Trojan horse DLL in a "system folder."...

CVE-2012-5458: Undefined Security Weakness

VMware Workstation 8.x before 8.0.5 and VMware Player 4.x before 4.0.5 on Windows use weak permissions for unspecified process threads, which allows host OS users to gain host OS privileges via a crafted application...

CVE-2012-1666

The CVE-2012-1666 entry describes an untrusted search path vulnerability in VMware Tools components across VMware Workstation (before 8.0.4), VMware Player (before 4.0.4), VMware Fusion (before 4.1.2), VMware View (before 5.1), and VMware ESX (4.1 before U3 and 5.0 before P03). The underlying iss...

PT-2012-3428

Name of the Vulnerable Software and Affected Versions VMware Workstation versions prior to 8.0.4 VMware Player versions prior to 4.0.4 VMware Fusion versions prior to 4.1.2 VMware View versions prior to 5.1 VMware ESX 4.1 versions prior to U3 VMware ESX 5.0 versions prior to P03 Description The...

CVE-2012-1666: Undefined Security Weakness

Untrusted search path vulnerability in VMware Tools in VMware Workstation before 8.0.4, VMware Player before 4.0.4, VMware Fusion before 4.1.2, VMware View before 5.1, and VMware ESX 4.1 before U3 and 5.0 before P03 allows local users to gain privileges via a Trojan horse tpfc.dll file in the...

VMware Player Multiple Vulnerabilities (VMSA-2012-0011)

The VMware Player install detected on the remote host is 3.x earlier than 3.1.6, or 4.0.x, earlier than 4.0.4 and is, therefore, potentially affected by the following vulnerabilities : - A memory corruption error exists related to the handling of 'Checkpoint' files that can allow arbitrary code...

PT-2012-4625

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 8.0 through 8.0.3 VMware Player versions 4.0 through 4.0.3 VMware ESXi versions 3.5 through 5.0 VMware ESX versions 3.5 through 4.1 Description The issue allows remote attackers to cause a denial of service, resulti...

CVE-2012-3288: Improper Input Validation

VMware Workstation 7.x before 7.1.6 and 8.x before 8.0.4, VMware Player 3.x before 3.1.6 and 4.x before 4.0.4, VMware Fusion 4.x before 4.1.3, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 through 4.1 allow user-assisted remote attackers to execute arbitrary code on the host OS or cause a denia...

CVE-2012-3289: Improper Control of Generation of Code

VMware Workstation 8.x before 8.0.4, VMware Player 4.x before 4.0.4, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 through 4.1 allow remote attackers to cause a denial of service guest OS crash via crafted traffic from a remote virtual device...

PT-2012-4624

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 7.0 through 7.1.6 VMware Workstation versions 8.0 through 8.0.4 VMware Player versions 3.0 through 3.1.6 VMware Player versions 4.0 through 4.0.4 VMware Fusion versions 4.0 through 4.1.3 VMware ESXi versions 3.5...

VMware Player Multiple Vulnerabilities (VMSA-2012-0009)

The VMware Player install detected on the remote host is 3.x earlier than 3.1.6, or 4.0.x earlier than 4.0.3 and is, therefore, potentially affected by the following vulnerabilities : - Memory corruption errors exist related to the RPC commands handler function which could cause the application t...

PT-2012-4052

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 8.0.0 through 8.0.2 VMware Player versions 4.0.0 through 4.0.2 VMware Fusion versions 4.0.0 through 4.1.2 VMware ESXi versions 3.5 through 5.0 VMware ESX versions 3.5 through 4.1 Description The issue arises from th...