CVE-2015-2339: Undefined Security Weakness

TPview.dll in VMware Workstation 10.x before 10.0.6 and 11.x before 11.1.1, VMware Player 6.x before 6.0.6 and 7.x before 7.1.1, and VMware Horizon Client 3.2.x before 3.2.1, 3.3.x, and 5.x local-mode before 5.4.2 on Windows does not properly allocate memory, which allows guest OS users to cause ...

CVE-2015-2341: Improper Input Validation

VMware Workstation 10.x before 10.0.5, VMware Player 6.x before 6.0.6, and VMware Fusion 6.x before 6.0.6 and 7.x before 7.0.1 allow attackers to cause a denial of service against a 32-bit guest OS or 64-bit host OS via a crafted RPC command...

PT-2015-1430

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 10.0.0 through 10.0.5 VMware Workstation versions 11.0.0 through 11.1.0 VMware Player versions 6.0.0 through 6.0.5 VMware Player versions 7.0.0 through 7.1.0 VMware Horizon Client versions 3.2.0 through 3.2.0 VMware...

PT-2015-1427

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 10.x through 10.0.5 and 11.x through 11.1.0 VMware Player versions 6.x through 6.0.5 and 7.x through 7.1.0 VMware Horizon Client versions 3.2.x through 3.2.0, 3.3.x, and 5.x local-mode through 5.4.1 Description The...

CVE-2015-2337: Undefined Security Weakness

TPInt.dll in VMware Workstation 10.x before 10.0.6 and 11.x before 11.1.1, VMware Player 6.x before 6.0.6 and 7.x before 7.1.1, and VMware Horizon Client 3.2.x before 3.2.1, 3.3.x, and 5.x local-mode before 5.4.2 on Windows does not properly allocate memory, which allows guest OS users to execute...

VMware Workstation/Player/Fusion 'TPInt.dll' Arbitrary Code Execution Vulnerability

VMware is a vendor of desktop to datacenter virtualization solutions. A memory allocation error vulnerability exists in VMware Workstation/Player/Fusion 'TPInt.dll' that allows remote attackers on Guest to execute arbitrary code...

VMware Workstation/Player/Fusion 'TPInt.dll' Denial of Service Vulnerability

VMware is a vendor of desktop to datacenter virtualization solutions. A memory allocation error vulnerability exists in VMware Workstation/Player/Fusion 'TPInt.dll', which allows remote attackers on Guest to conduct denial of service attacks...

VMware Workstation/Player/Fusion Custom RPC Command Denial of Service Vulnerability

VMware is a vendor of desktop to datacenter virtualization solutions. A security vulnerability exists in VMware Workstation/Player/Fusion that allows a remote attacker on Guest to send specially crafted RPC commands to trigger input validation errors and conduct denial of service attacks...

VMware Player 6.x < 6.0.5 Multiple Vulnerabilities (VMSA-2015-0001) (Windows)

The version of VMware Player installed on the remote host is version 6.x prior to 6.0.5. It is, therefore, affected by the following vulnerabilities : - An unspecified flaw exists that allows a local attacker to escalate privileges or cause a denial of service via an arbitrary write to a file...

CVE-2015-1044

vmware-authd aka the Authorization process in VMware Workstation 10.x before 10.0.5, VMware Player 6.x before 6.0.5, and VMware ESXi 5.0 through 5.5 allows attackers to cause a host OS denial of service via unspecified vectors...

CVE-2014-8370

VMware Workstation 10.x before 10.0.5, VMware Player 6.x before 6.0.5, VMware Fusion 6.x before 6.0.5, and VMware ESXi 5.0 through 5.5 allow host OS users to gain host OS privileges or cause a denial of service arbitrary write to a file by modifying a configuration file...

Authorization

vmware-authd aka the Authorization process in VMware Workstation 10.x before 10.0.5, VMware Player 6.x before 6.0.5, and VMware ESXi 5.0 through 5.5 allows attackers to cause a host OS denial of service via unspecified vectors...

CVE-2015-1043

Affected products and component: VMware HGFS in Workstation 10.x (before 10.0.5), VMware Player 6.x (before 6.0.5), and VMware Fusion 6.x (before 6.0.5) and 7.x (before 7.0.1). Vulnerability and impact: HGFS input validation flaw that allows guest OS users to cause a guest OS denial of service. T...

PT-2015-4033

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 10.x through 10.0.4 VMware Player versions 6.x through 6.0.4 VMware Fusion versions 6.x through 6.0.4 VMware ESXi versions 5.0 through 5.5 Description The issue allows host OS users to gain host OS privileges or cau...

PT-2015-5034

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 10.0.0 through 10.0.4 VMware Player versions 6.0.0 through 6.0.4 VMware Fusion versions 6.0.0 through 6.0.4 VMware Fusion versions 7.0.0 Description The issue allows guest OS users to cause a denial of service in th...

PT-2015-5035

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 10.0.0 through 10.0.4 VMware Player versions 6.0.0 through 6.0.4 VMware ESXi versions 5.0 through 5.5 Description The issue allows attackers to cause a denial of service in the host OS via unspecified vectors. This ...

CVE-2015-1043: Improper Input Validation

The Host Guest File System HGFS in VMware Workstation 10.x before 10.0.5, VMware Player 6.x before 6.0.5, and VMware Fusion 6.x before 6.0.5 and 7.x before 7.0.1 allows guest OS users to cause a guest OS denial of service via unspecified vectors...

CVE-2015-1044: Undefined Security Weakness

vmware-authd aka the Authorization process in VMware Workstation 10.x before 10.0.5, VMware Player 6.x before 6.0.5, and VMware ESXi 5.0 through 5.5 allows attackers to cause a host OS denial of service via unspecified vectors...

CVE-2014-8370: Undefined Security Weakness

VMware Workstation 10.x before 10.0.5, VMware Player 6.x before 6.0.5, VMware Fusion 6.x before 6.0.5, and VMware ESXi 5.0 through 5.5 allow host OS users to gain host OS privileges or cause a denial of service arbitrary write to a file by modifying a configuration file...

KLA10452 Multiple vulnerabilities in VMware products

Multiple serious vulnerabilities have been found in VMware products. Malicious users can exploit these vulnerabilities to gain privileges or cause denial of service. Below is a complete list of vulnerabilities 1. Vectors related to file write can be exploited locally; 2. Improper input validation...