PT-2016-3731

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 11.0 through 11.1.1 VMware Player versions 7.0 through 7.1.1 VMware Fusion versions 7.0 through 7.1.1 VMware ESXi versions 5.0 through 6.0 Description The issue allows Windows guest OS users to gain guest OS...

CVE-2015-6933: Improper Access Control

The VMware Tools HGFS aka Shared Folders implementation in VMware Workstation 11.x before 11.1.2, VMware Player 7.x before 7.1.2, VMware Fusion 7.x before 7.1.2, and VMware ESXi 5.0 through 6.0 allows Windows guest OS users to gain guest OS privileges or cause a denial of service guest OS kernel...

Multiple VMware Product Host Elevation of Privilege Vulnerabilities

VMware Workstation, VMware Player are virtual machine software.VMware Horizon Client is a device that provides access to VMware Horizon desktops from any location. The vmware-vmx.exe file in multiple VMware products fails to properly set the DACL of a process, allowing a local attacker to exploit...

PT-2015-6256

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 7.x through 10.x before 10.0.7 VMware Workstation versions 11.x before 11.1.1 VMware Player versions 5.x and 6.x before 6.0.7 VMware Player versions 7.x before 7.1.1 VMware Horizon Client versions 5.x local-mode...

CVE-2015-3650: Improper Access Control

vmware-vmx.exe in VMware Workstation 7.x through 10.x before 10.0.7 and 11.x before 11.1.1, VMware Player 5.x and 6.x before 6.0.7 and 7.x before 7.1.1, and VMware Horizon Client 5.x local-mode before 5.4.2 on Windows does not provide a valid DACL pointer during the setup of the vprintproxy.exe...

The vulnerability of the VMware Workstation hypervisor allows a attacker to cause a failure in the guest or host operating system.

The vulnerability of VMware Workstation exists due to insufficient verification of input data. Exploiting this vulnerability can allow an attacker to cause a failure in the maintenance of 32-bit or 64-bit host operating systems using a specially crafted RPC request...

MS15-034 HTTP Protocol Stack Request Handling HTTP.SYS Memory Information Disclosure

This module dumps memory contents using a crafted Range header and affects only Windows 8.1, Server 2012, and Server 2012R2. Note that if the target is running in VMware Workstation, this module has a high likelihood of resulting in BSOD; however, VMware ESX and non-virtualized hosts seem stable...

VMware Workstation 10.x < 10.0.6 RPC Command DoS (VMSA-2015-0004) (Linux)

The version of VMware Workstation installed on the remote Linux host is 10.x prior to 10.0.6. It is, therefore, affected by a denial of service vulnerability due to improper validation of user-supplied input to a remote procedure call RPC command. An unauthenticated, remote attacker can exploit...

Design/Logic Flaw

TPview.dll in VMware Workstation 10.x before 10.0.6 and 11.x before 11.1.1, VMware Player 6.x before 6.0.6 and 7.x before 7.1.1, and VMware Horizon Client 3.2.x before 3.2.1, 3.3.x, and 5.x local-mode before 5.4.2 on Windows does not properly allocate memory, which allows guest OS users to cause ...

Design/Logic Flaw

TPInt.dll in VMware Workstation 10.x before 10.0.6 and 11.x before 11.1.1, VMware Player 6.x before 6.0.6 and 7.x before 7.1.1, and VMware Horizon Client 3.2.x before 3.2.1, 3.3.x, and 5.x local-mode before 5.4.2 on Windows does not properly allocate memory, which allows guest OS users to execute...

CVE-2015-2336

CVE-2015-2336 affects VMware products on Windows: TPView.dll/TPInt.dll memory allocation issues in VMware Workstation 10.x before 10.0.6 and 11.x before 11.1.1, VMware Player 6.x before 6.0.6 and 7.x before 7.1.1, and VMware Horizon Client 3.2.x before 3.2.1, 3.3.x, and 5.x local-mode before 5.4....

PT-2015-1428

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 10.0.0 through 10.0.5 VMware Workstation versions 11.0.0 through 11.0.0 VMware Player versions 6.0.0 through 6.0.5 VMware Player versions 7.0.0 through 7.0.0 VMware Horizon Client versions 3.2.0 through 3.2.0 VMware...

PT-2015-1323

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 10.x through 10.0.4 VMware Player versions 6.x through 6.0.5 VMware Fusion versions 6.x through 6.0.5 and versions 7.x through 7.0.0 Description The issue exists due to insufficient input validation in the hyperviso...

PT-2015-1431

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 10.0.0 through 10.0.5 VMware Workstation versions 11.0.0 through 11.0.0 VMware Player versions 6.0.0 through 6.0.5 VMware Player versions 7.0.0 through 7.0.0 VMware Horizon Client versions 3.2.0 through 3.2.0 VMware...

PT-2015-1430

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 10.0.0 through 10.0.5 VMware Workstation versions 11.0.0 through 11.1.0 VMware Player versions 6.0.0 through 6.0.5 VMware Player versions 7.0.0 through 7.1.0 VMware Horizon Client versions 3.2.0 through 3.2.0 VMware...

CVE-2015-2336: Undefined Security Weakness

TPView.dll in VMware Workstation 10.x before 10.0.6 and 11.x before 11.1.1, VMware Player 6.x before 6.0.6 and 7.x before 7.1.1, and VMware Horizon Client 3.2.x before 3.2.1, 3.3.x, and 5.x local-mode before 5.4.2 on Windows does not properly allocate memory, which allows guest OS users to execut...

CVE-2015-2338: Undefined Security Weakness

TPview.dll in VMware Workstation 10.x before 10.0.6 and 11.x before 11.1.1, VMware Player 6.x before 6.0.6 and 7.x before 7.1.1, and VMware Horizon Client 3.2.x before 3.2.1, 3.3.x, and 5.x local-mode before 5.4.2 on Windows does not properly allocate memory, which allows guest OS users to cause ...

PT-2015-1427

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 10.x through 10.0.5 and 11.x through 11.1.0 VMware Player versions 6.x through 6.0.5 and 7.x through 7.1.0 VMware Horizon Client versions 3.2.x through 3.2.0, 3.3.x, and 5.x local-mode through 5.4.1 Description The...

PT-2015-1429

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 10.0.0 through 10.0.5 VMware Workstation versions 11.0.0 through 11.0.0 VMware Player versions 6.0.0 through 6.0.5 VMware Player versions 7.0.0 through 7.0.0 VMware Horizon Client versions 3.2.0 through 3.2.0 VMware...

CVE-2015-2340: Undefined Security Weakness

TPInt.dll in VMware Workstation 10.x before 10.0.6 and 11.x before 11.1.1, VMware Player 6.x before 6.0.6 and 7.x before 7.1.1, and VMware Horizon Client 3.2.x before 3.2.1, 3.3.x, and 5.x local-mode before 5.4.2 on Windows does not properly allocate memory, which allows guest OS users to cause a...