CVE-2016-7461: Improper Restriction of Operations within the Bounds of a Memory Buffer

The drag-and-drop aka DnD function in VMware Workstation Pro 12.x before 12.5.2 and VMware Workstation Player 12.x before 12.5.2 and VMware Fusion and Fusion Pro 8.x before 8.5.2 allows guest OS users to execute arbitrary code on the host OS or cause a denial of service out-of-bounds memory acces...

PT-2016-7203

Name of the Vulnerable Software and Affected Versions VMware Workstation Pro versions 12.0 through 12.4 VMware Workstation Player versions 12.0 through 12.4 Description The issue allows guest OS users to execute arbitrary code on the host OS or cause a denial of service due to host OS memory...

PT-2016-7201

Name of the Vulnerable Software and Affected Versions VMware Workstation Pro versions 12.0 through 12.4 VMware Workstation Player versions 12.0 through 12.4 Description The issue allows guest OS users to execute arbitrary code on the host OS or cause a denial of service via an EMF file when Corta...

PT-2016-7204

Name of the Vulnerable Software and Affected Versions VMware Workstation Pro versions 12.0 through 12.4 VMware Workstation Player versions 12.0 through 12.4 Description The issue is related to an untrusted search path vulnerability in the installer. This allows local users to gain privileges via ...

PT-2016-7205

Name of the Vulnerable Software and Affected Versions VMware Workstation Pro versions 12.0 through 12.4 VMware Workstation Player versions 12.0 through 12.4 Description The issue allows local users to gain privileges via a Trojan horse setup64.exe file in the installation directory. Recommendatio...

CVE-2016-7086: Undefined Security Weakness

The installer in VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows allows local users to gain privileges via a Trojan horse setup64.exe file in the installation directory...

VMware Workstation Remote Elevation of Privilege Vulnerability

VMware Workstation is a paid and feature-rich virtual machine software suite. VMware Workstation suffers from a remote elevation of privilege vulnerability that allows an attacker to gain elevated privileges on the host operating system...

Google Pixel Phone and Microsoft Edge Hacked at PwnFest 2016

The brand new Android smartphone launched by Google just a few months back has been hacked by Chinese hackers just in less than a minute. Yes, the Google's latest Pixel smartphone has been hacked by a team white-hat hackers from Qihoo 360, besides at the 2016 PwnFest hacking competition in Seoul...

VMSA-2016-0019:VMware Workstation and Fusion updates address CRITICAL out-of-bounds memory access vulnerability

VMSA-2016-0019 VMware Workstation and Fusion updates address critical out-of-bounds memory access vulnerability VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2016-0019 VMware Security Advisory Severity: Critical VMware Security Advisory Synopsis: VMware Workstation and Fusio...

VMware Workstation and Workstation Player Remote Code Execution Vulnerability

VMware Workstation and VMware Workstation Player are virtual machine software products from VMware, Inc. VMware Workstation is a paid, feature-rich virtual machine software. VMware Workstation Player is a free and open source virtual machine software with simpler features. A remote code execution...

VMware Workstation and Workstation Player Memory Corruption Vulnerability (CNVD-2016-07812)

VMware Workstation and VMware Workstation Player are virtual machine software products from VMware, Inc. VMware Workstation is a paid, feature-rich virtual machine software. VMware Workstation Player is a free and open source virtual machine software with simpler features. A memory corruption...

VMware Workstation - vprintproxy.exe JPEG2000 Images Multiple Memory Corruptions

VMware Workstation - vprintproxy.exe JPEG2000 Images Multiple Memory Corruptions Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=850 As already discussed in a number of reports in this tracker 285, 286, 287, 288, 289, 292, VMware Workstation current version 12.1.1 build-3770994...

VMware Workstation and Workstation Player Memory Corruption Vulnerability (CNVD-2016-07810)

VMware Workstation and VMware Workstation Player are virtual machine software products from VMware, Inc. VMware Workstation is a paid, feature-rich virtual machine software. VMware Workstation Player is a free and open source virtual machine software with simpler features. A memory corruption...

VMware Workstation and Workstation Player Memory Corruption Vulnerability

VMware Workstation and VMware Workstation Player are virtual machine software products from VMware, Inc. VMware Workstation is a paid, feature-rich virtual machine software. VMware Workstation Player is a free and open source virtual machine software with simpler features. A memory corruption...

VMware Workstation - vprintproxy.exe TrueType NAME Tables Heap Buffer Overflow

Exploit for windows platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=849 As already discussed in a number of reports in this tracker 285, 286, 287, 288, 289, 292, VMware Workstation current version 12.1.1 build-3770994 ships with a feature called...

VMware Workstation - 'vprintproxy.exe' JPEG2000 Images Multiple Memory Corruptions

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=850 As already discussed in a number of reports in this tracker 285, 286, 287, 288, 289, 292, VMware Workstation current version 12.1.1 build-3770994 ships with a feature called "Virtual Printers", which enables the virtualized...

Multiple VMware Workstation Product Heap Buffer Overflow Vulnerabilities

VMWare Workstation is a suite of desktop virtual computer software. A heap buffer overflow vulnerability exists in the Windows-based Virtual Machine in VMware Workstation, which can be exploited by an attacker on a Windows platform to crash an application or execute arbitrary code...

VMware Workstation 12.x < 12.5.0 Multiple Vulnerabilities (VMSA-2016-0014)

The version of VMware Workstation installed on the remote host is 12.x prior to 12.5.0. It is, therefore, affected by multiple vulnerabilities : - A heap buffer overflow condition exists in Cortado ThinPrint due to improper validation of user-supplied input. An attacker on the guest can exploit...

VMware Workstation Player 'HGFS' Feature Privilege Escalation Vulnerability - Linux

VMware Workstation Player is prone to an important guest privilege escalation vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CP...

VMware Workstation Player 'HGFS' Feature Privilege Escalation Vulnerability - Windows

VMware Workstation Player is prone to an important guest privilege escalation vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CP...