PT-2014-4670

Name of the Vulnerable Software and Affected Versions VMware Workstation version 10.0.1 build 1379776 VMware Player version 6.0.1 build 1379776 Description The issue allows local users to cause a denial of service, resulting in a read access violation and system crash, via a crafted buffer in an...

VMware Workstation 9.x < 9.0.1 VMX Process DoS (VMSA-2014-0001) (Linux)

The installed version of VMware Workstation 9.x is prior to 9.0.1. It is, therefore, affected by a denial of service vulnerability due to an issue with handling invalid ports that could allow a guest user to crash the VMX process. C Tenable Network Security, Inc. include"compat.inc"; if descripti...

VMware Workstation 9.x < 9.0.1 VMX Process DoS (VMSA-2014-0001)

The version of VMware Workstation installed on the remote host is version 9.x prior to 9.0.1. It is, therefore, reportedly affected by a denial of service vulnerability due to an issue with handling invalid ports that could allow a guest user to crash the VMX process. C Tenable Network Security,...

CVE-2014-1208: Undefined Security Weakness

VMware Workstation 9.x before 9.0.1, VMware Player 5.x before 5.0.1, VMware Fusion 5.x before 5.0.1, VMware ESXi 4.0 through 5.1, and VMware ESX 4.0 and 4.1 allow guest OS users to cause a denial of service VMX process disruption by using an invalid port...

PT-2014-1710

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 9.x before 9.0.1 VMware Player versions 5.x before 5.0.1 VMware Fusion versions 5.x before 5.0.1 VMware ESXi versions 4.0 through 5.1 VMware ESX versions 4.0 and 4.1 Description The issue allows users of the guest...

CVE-2013-3519

lgtosync.sys in VMware Workstation 9.x before 9.0.3, VMware Player 5.x before 5.0.3, VMware Fusion 5.x before 5.0.4, VMware ESXi 4.0 through 5.1, and VMware ESX 4.0 and 4.1, when a 32-bit Windows guest OS is used, allows guest OS users to gain guest OS privileges via an application that performs ...

CVE-2013-3519: Undefined Security Weakness

lgtosync.sys in VMware Workstation 9.x before 9.0.3, VMware Player 5.x before 5.0.3, VMware Fusion 5.x before 5.0.4, VMware ESXi 4.0 through 5.1, and VMware ESX 4.0 and 4.1, when a 32-bit Windows guest OS is used, allows guest OS users to gain guest OS privileges via an application that performs ...

VMSA-2013-0014 VMware Workstation, Fusion, ESXi and ESX patches address a guest privilege escalation (remote check)

VMware Workstation, Fusion, ESXi and ESX patches address a vulnerability in the LGTOSYNC.SYS driver which could result in a privilege escalation on older Windows-based Guest Operating Systems. OpenVAS Vulnerability Test $Id: gbVMSA-2013-0014remote.nasl 6093 2017-05-10 09:03:18Z teissa $...

PT-2013-4450

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 9.0.0 through 9.0.2 VMware Player versions 5.0.0 through 5.0.2 VMware Fusion versions 5.0.0 through 5.0.3 VMware ESXi versions 4.0 through 5.1 VMware ESX versions 4.0 and 4.1 Description The issue allows guest OS...

VMware Workstation Installed (Linux)

Binary data vmwareworkstationlinuxinstalled.nbin...

PT-2013-5895

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 9.0.0 through 9.0.2 VMware Player versions 5.0.0 through 5.0.2 Description The issue arises from improper handling of shared libraries, allowing host OS users to gain host OS privileges. Recommendations For VMware...

CVE-2013-5972: Undefined Security Weakness

VMware Workstation 9.x before 9.0.3 and VMware Player 5.x before 5.0.3 on Linux do not properly handle shared libraries, which allows host OS users to gain host OS privileges via unspecified vectors...

NEW VMSA-2013-0010 VMware Workstation host privilege escalation vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ----------------------------------------------------------------------- VMware Security Advisory Advisory ID: VMSA-2013-0010 Synopsis: VMware Workstation host privilege escalation vulnerability Issue date: 2013-08-22 Updated on: 2013-08-22 initial...

PT-2013-3302

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 8.x through 9.x VMware Player versions 4.x through 5.x Description The issue allows host OS users to gain host OS privileges via a crafted lsb release binary in a directory in the PATH, related to the use of the pop...

CVE-2013-1662: Undefined Security Weakness

vmware-mount in VMware Workstation 8.x and 9.x and VMware Player 4.x and 5.x, on systems based on Debian GNU/Linux, allows host OS users to gain host OS privileges via a crafted lsbrelease binary in a directory in the PATH, related to use of the popen library function...

PT-2013-3131

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 8.0 through 8.0.4 VMware Workstation version 9.0 VMware Fusion versions 4.1 through 4.1.3 VMware Fusion version 5.0 VMware View versions 4.x through 4.6.1 VMware View versions 5.x through 5.1.1 VMware ESXi versions...

CVE-2013-1406: Improper Input Validation

The Virtual Machine Communication Interface VMCI implementation in vmci.sys in VMware Workstation 8.x before 8.0.5 and 9.x before 9.0.1 on Windows, VMware Fusion 4.1 before 4.1.4 and 5.0 before 5.0.2, VMware View 4.x before 4.6.2 and 5.x before 5.1.2 on Windows, VMware ESXi 4.0 through 5.1, and...

VMware Workstation 8.x < 8.0.5 Multiple Vulnerabilities (VMSA-2012-0015)

The VMware Workstation 8.x install detected on the remote host is earlier than 8.0.5 and is, therefore, potentially affected by the following vulnerabilities : - Certain processes, when created, have weak security permissions assigned. It is possible to commandeer these process threads, which cou...

[VMInjector] DLL Injection tool to unlock guest VMs

Overview: VMInjector is a tool designed to bypass OS login authentication screens of major operating systems running on VMware Workstation/Player, by using direct memory manipulation. Description: VMInjector is a tool which manipulates the memory of VMware guests in order to bypass the operation...

CVE-2012-5458: Undefined Security Weakness

VMware Workstation 8.x before 8.0.5 and VMware Player 4.x before 4.0.5 on Windows use weak permissions for unspecified process threads, which allows host OS users to gain host OS privileges via a crafted application...