PT-2011-3635

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 7.1.x through 7.1.3 VMware Player versions 3.1.x through 3.1.3 VMware Fusion versions 3.1.x through 3.1.2 VMware ESXi versions 3.5 through 4.1 VMware ESX versions 3.0.3 through 4.1 Description The issue allows guest...

CVE-2011-2146: Exposure of Sensitive Information to an Unauthorized Actor

mount.vmhgfs in the VMware Host Guest File System HGFS in VMware Workstation 7.1.x before 7.1.4, VMware Player 3.1.x before 3.1.4, VMware Fusion 3.1.x before 3.1.3, VMware ESXi 3.5 through 4.1, and VMware ESX 3.0.3 through 4.1 allows guest OS users to determine the existence of host OS files and...

PT-2011-3634

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 7.1.x through 7.1.3 VMware Player versions 3.1.x through 3.1.3 VMware Fusion versions 3.1.x through 3.1.2 VMware ESXi versions 3.5 through 4.1 VMware ESX versions 3.0.3 through 4.1 Description The issue allows guest...

CVE-2011-1787: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in mount.vmhgfs in the VMware Host Guest File System HGFS in VMware Workstation 7.1.x before 7.1.4, VMware Player 3.1.x before 3.1.4, VMware Fusion 3.1.x before 3.1.3, VMware ESXi 3.5 through 4.1, and VMware ESX 3.0.3 through 4.1 allows guest OS users to gain privileges on the gues...

CVE-2011-2145: Undefined Security Weakness

mount.vmhgfs in the VMware Host Guest File System HGFS in VMware Workstation 7.1.x before 7.1.4, VMware Player 3.1.x before 3.1.4, VMware Fusion 3.1.x before 3.1.3, VMware ESXi 3.5 through 4.1, and VMware ESX 3.0.3 through 4.1, when a Solaris or FreeBSD guest OS is used, allows guest OS users to...

PT-2011-3368

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 7.1.x through 7.1.3 VMware Player versions 3.1.x through 3.1.3 VMware Fusion versions 3.1.x through 3.1.2 VMware ESXi versions 3.5 through 4.1 VMware ESX versions 3.0.3 through 4.1 Description A race condition exist...

VMware Products Tools Local Privilege Escalation Vulnerability (Windows)

The host is installed with VMWare products tools local privilege escalation vulnerability. OpenVAS Vulnerability Test $Id: gbvmwareprdtstoolslocprevesclvulnwin.nasl 5388 2017-02-21 15:13:30Z teissa $ VMware Products Tools Local Privilege Escalation Vulnerability Windows Authors: Antu Sanadi...

VMware Products Multiple Local Privilege Escalation Vulnerabilities (Linux)

The host is installed with VMWare products multiple local privilege escalation Vulnerabilities. OpenVAS Vulnerability Test $Id: gbvmwareprdtsmultlocprevesclvulnlin.nasl 5388 2017-02-21 15:13:30Z teissa $ VMware Products Multiple Local Privilege Escalation Vulnerabilities Linux Authors: Antu Sanad...

VMware Products Tools Local Privilege Escalation Vulnerability (Linux)

The host is installed with VMWare products tools local privilege escalation vulnerability. OpenVAS Vulnerability Test $Id: gbvmwareprdtstoolslocprevesclvulnlin.nasl 5388 2017-02-21 15:13:30Z teissa $ VMware Products Tools Local Privilege Escalation Vulnerability Linux Authors: Antu Sanadi...

VMware Products Memory Corruption and Buffer Overflow Vulnerability (Windows)

The host is installed with VMWare products and are prone to memory corruption and buffer overflow Vulnerability OpenVAS Vulnerability Test $Id: gbvmwareprdtsmemcorruptionnbofvulnwin.nasl 5388 2017-02-21 15:13:30Z teissa $ VMware Products Memory Corruption and Buffer Overflow Vulnerability Windows...

Memory corruption

The frame decompression functionality in the VMnc media codec in VMware Movie Decoder before 6.5.5 build 328052 and 7.x before 7.1.2 build 301548, VMware Workstation 6.5.x before 6.5.5 build 328052 and 7.x before 7.1.2 build 301548 on Windows, VMware Player 2.5.x before 2.5.5 build 246459 and 3.x...

Design/Logic Flaw

vmware-mount in VMware Workstation 7.x before 7.1.2 build 301548 on Linux, VMware Player 3.1.x before 3.1.2 build 301548 on Linux, VMware Server 2.0.2 on Linux, and VMware Fusion 3.1.x before 3.1.2 build 332101 does not properly load libraries, which allows host OS users to gain privileges via...

CVE-2010-4295

CVE-2010-4295 describes a race condition in the mounting process of vmware-mount that could allow a local host user to gain privileges via temporary files. Affected products include VMware Workstation 7.x (before 7.1.2 on Linux), VMware Player 3.1.x (before 3.1.2 on Linux), VMware Server 2.0.2 (L...

PT-2010-5403 · Vmware · Vmware Server +3

Name of the Vulnerable Software and Affected Versions: VMware Workstation versions 7.0 through 7.1.2 build 301547 VMware Player versions 3.1.x through 3.1.2 build 301547 VMware Server version 2.0.2 VMware Fusion versions 3.1.x through 3.1.2 build 332100 Description: A race condition exists in the...

PT-2010-5404 · Vmware · Vmware Server +3

Name of the Vulnerable Software and Affected Versions: VMware Workstation versions 7.0 through 7.1.2 build 301547 VMware Player versions 3.1.x through 3.1.1 build 301547 VMware Server version 2.0.2 VMware Fusion versions 3.1.x through 3.1.1 build 332100 Description: The issue is related to the...

PT-2010-5402

Name of the Vulnerable Software and Affected Versions VMware Movie Decoder versions prior to 6.5.5 build 328052 and prior to 7.1.2 build 301548 VMware Workstation versions prior to 6.5.5 build 328052 and prior to 7.1.2 build 301548 VMware Player versions prior to 2.5.5 build 246459 and prior to...

PT-2010-5405

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 6.5.x through 6.5.4 VMware Workstation versions 7.x through 7.1.1 VMware Player versions 2.5.x through 2.5.4 VMware Player versions 3.1.x through 3.1.1 VMware Server version 2.0.2 VMware Fusion versions 2.x through...

CVE-2010-4297: Improper Input Validation

The VMware Tools update functionality in VMware Workstation 6.5.x before 6.5.5 build 328052 and 7.x before 7.1.2 build 301548; VMware Player 2.5.x before 2.5.5 build 328052 and 3.1.x before 3.1.2 build 301548; VMware Server 2.0.2; VMware Fusion 2.x before 2.0.8 build 328035 and 3.1.x before 3.1.2...

CVE-2010-4295: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in the mounting process in vmware-mount in VMware Workstation 7.x before 7.1.2 build 301548 on Linux, VMware Player 3.1.x before 3.1.2 build 301548 on Linux, VMware Server 2.0.2 on Linux, and VMware Fusion 3.1.x before 3.1.2 build 332101 allows host OS users to gain privileges via...

CVE-2010-4294: Improper Control of Generation of Code

The frame decompression functionality in the VMnc media codec in VMware Movie Decoder before 6.5.5 build 328052 and 7.x before 7.1.2 build 301548, VMware Workstation 6.5.x before 6.5.5 build 328052 and 7.x before 7.1.2 build 301548 on Windows, VMware Player 2.5.x before 2.5.5 build 246459 and 3.x...