VMware Player 7.x < 7.1.2 Shared Folders (HGFS) Guest Privilege Escalation (VMSA-2016-0001) (Linux)

The version of VMware Player installed on the remote host is version 7.x prior to 7.1.2. It is, therefore, affected by a guest privilege escalation vulnerability in the Shared Folders HGFS feature due to improper validation of user-supplied input. A local attacker can exploit this to corrupt...

CVE-2015-6933

CVE-2015-6933 affects VMware Tools HGFS across VMware Workstation (11.x prior to 11.1.2), VMware Player (7.x prior to 7.1.2), VMware Fusion (7.x prior to 7.1.2), and VMware ESXi (5.0–6.0). Root cause: HGFS/shared folders component vulnerability leading to guest OS privilege escalation or guest ke...

CVE-2015-6933: Improper Access Control

The VMware Tools HGFS aka Shared Folders implementation in VMware Workstation 11.x before 11.1.2, VMware Player 7.x before 7.1.2, VMware Fusion 7.x before 7.1.2, and VMware ESXi 5.0 through 6.0 allows Windows guest OS users to gain guest OS privileges or cause a denial of service guest OS kernel...

PT-2016-3731

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 11.0 through 11.1.1 VMware Player versions 7.0 through 7.1.1 VMware Fusion versions 7.0 through 7.1.1 VMware ESXi versions 5.0 through 6.0 Description The issue allows Windows guest OS users to gain guest OS...

Multiple VMware Product Host Elevation of Privilege Vulnerabilities

VMware Workstation, VMware Player are virtual machine software.VMware Horizon Client is a device that provides access to VMware Horizon desktops from any location. The vmware-vmx.exe file in multiple VMware products fails to properly set the DACL of a process, allowing a local attacker to exploit...

PT-2015-6256

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 7.x through 10.x before 10.0.7 VMware Workstation versions 11.x before 11.1.1 VMware Player versions 5.x and 6.x before 6.0.7 VMware Player versions 7.x before 7.1.1 VMware Horizon Client versions 5.x local-mode...

CVE-2015-3650: Improper Access Control

vmware-vmx.exe in VMware Workstation 7.x through 10.x before 10.0.7 and 11.x before 11.1.1, VMware Player 5.x and 6.x before 6.0.7 and 7.x before 7.1.1, and VMware Horizon Client 5.x local-mode before 5.4.2 on Windows does not provide a valid DACL pointer during the setup of the vprintproxy.exe...

The vulnerability of VMware Player allows a hacker to trigger a service failure in the guest or host operating system.

The vulnerability of VMware Player exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to trigger a service failure for a 32-bit guest operating system or a 64-bit host operating system using a specially crafted RPC request...

VMware Player 7.x < 7.1.1 Multiple Vulnerabilities (VMSA-2015-0004)

The version of VMware Player installed on the remote Windows host is 7.x prior to 7.1.1. It is, therefore, affected by multiple vulnerabilities : - An arbitrary code execution vulnerability exists due to a stack-based buffer overflow condition in the JPEG2000 plugin that is triggered when parsing...

VMware Player 6.x < 6.0.6 RPC Command DoS (VMSA-2015-0004) (Linux)

The version of VMware Player installed on the remote Linux host is 6.x prior to 6.0.6. It is, therefore, affected by a denial of service vulnerability due to improper validation of user-supplied input to a remote procedure call RPC command. An unauthenticated, remote attacker can exploit this, vi...

Design/Logic Flaw

TPInt.dll in VMware Workstation 10.x before 10.0.6 and 11.x before 11.1.1, VMware Player 6.x before 6.0.6 and 7.x before 7.1.1, and VMware Horizon Client 3.2.x before 3.2.1, 3.3.x, and 5.x local-mode before 5.4.2 on Windows does not properly allocate memory, which allows guest OS users to execute...

Design/Logic Flaw

TPview.dll in VMware Workstation 10.x before 10.0.6 and 11.x before 11.1.1, VMware Player 6.x before 6.0.6 and 7.x before 7.1.1, and VMware Horizon Client 3.2.x before 3.2.1, 3.3.x, and 5.x local-mode before 5.4.2 on Windows does not properly allocate memory, which allows guest OS users to cause ...

CVE-2015-2336

CVE-2015-2336 affects VMware products on Windows: TPView.dll/TPInt.dll memory allocation issues in VMware Workstation 10.x before 10.0.6 and 11.x before 11.1.1, VMware Player 6.x before 6.0.6 and 7.x before 7.1.1, and VMware Horizon Client 3.2.x before 3.2.1, 3.3.x, and 5.x local-mode before 5.4....

PT-2015-1428

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 10.0.0 through 10.0.5 VMware Workstation versions 11.0.0 through 11.0.0 VMware Player versions 6.0.0 through 6.0.5 VMware Player versions 7.0.0 through 7.0.0 VMware Horizon Client versions 3.2.0 through 3.2.0 VMware...

PT-2015-1427

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 10.x through 10.0.5 and 11.x through 11.1.0 VMware Player versions 6.x through 6.0.5 and 7.x through 7.1.0 VMware Horizon Client versions 3.2.x through 3.2.0, 3.3.x, and 5.x local-mode through 5.4.1 Description The...

PT-2015-1323

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 10.x through 10.0.4 VMware Player versions 6.x through 6.0.5 VMware Fusion versions 6.x through 6.0.5 and versions 7.x through 7.0.0 Description The issue exists due to insufficient input validation in the hyperviso...

PT-2015-1429

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 10.0.0 through 10.0.5 VMware Workstation versions 11.0.0 through 11.0.0 VMware Player versions 6.0.0 through 6.0.5 VMware Player versions 7.0.0 through 7.0.0 VMware Horizon Client versions 3.2.0 through 3.2.0 VMware...

PT-2015-1430

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 10.0.0 through 10.0.5 VMware Workstation versions 11.0.0 through 11.1.0 VMware Player versions 6.0.0 through 6.0.5 VMware Player versions 7.0.0 through 7.1.0 VMware Horizon Client versions 3.2.0 through 3.2.0 VMware...

PT-2015-1431

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 10.0.0 through 10.0.5 VMware Workstation versions 11.0.0 through 11.0.0 VMware Player versions 6.0.0 through 6.0.5 VMware Player versions 7.0.0 through 7.0.0 VMware Horizon Client versions 3.2.0 through 3.2.0 VMware...

CVE-2015-2337: Undefined Security Weakness

TPInt.dll in VMware Workstation 10.x before 10.0.6 and 11.x before 11.1.1, VMware Player 6.x before 6.0.6 and 7.x before 7.1.1, and VMware Horizon Client 3.2.x before 3.2.1, 3.3.x, and 5.x local-mode before 5.4.2 on Windows does not properly allocate memory, which allows guest OS users to execute...