CVE-2012-5459: Undefined Security Weakness

Untrusted search path vulnerability in VMware Workstation 8.x before 8.0.5 and VMware Player 4.x before 4.0.5 on Windows allows host OS users to gain host OS privileges via a Trojan horse DLL in a "system folder."...

PT-2012-5983

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 8.0.0 through 8.0.4 VMware Player versions 4.0.0 through 4.0.4 Description The issue allows host OS users to gain host OS privileges via a Trojan horse DLL in a "system folder" due to an untrusted search path...

PT-2012-5982

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 8.0.0 through 8.0.4 VMware Player versions 4.0.0 through 4.0.4 Description The issue allows host OS users to gain host OS privileges via a crafted application due to weak permissions for unspecified process threads...

PT-2012-4818

Name of the Vulnerable Software and Affected Versions VMware OVF Tool version 2.1 VMware Workstation versions 8.0 through 8.0.4 VMware Player versions 4.0 through 4.0.4 Description A format string issue allows user-assisted remote attackers to execute arbitrary code via a crafted OVF file...

CVE-2012-1666

The CVE-2012-1666 entry describes an untrusted search path vulnerability in VMware Tools components across VMware Workstation (before 8.0.4), VMware Player (before 4.0.4), VMware Fusion (before 4.1.2), VMware View (before 5.1), and VMware ESX (4.1 before U3 and 5.0 before P03). The underlying iss...

PT-2012-3428

Name of the Vulnerable Software and Affected Versions VMware Workstation versions prior to 8.0.4 VMware Player versions prior to 4.0.4 VMware Fusion versions prior to 4.1.2 VMware View versions prior to 5.1 VMware ESX 4.1 versions prior to U3 VMware ESX 5.0 versions prior to P03 Description The...

CVE-2012-1666: Undefined Security Weakness

Untrusted search path vulnerability in VMware Tools in VMware Workstation before 8.0.4, VMware Player before 4.0.4, VMware Fusion before 4.1.2, VMware View before 5.1, and VMware ESX 4.1 before U3 and 5.0 before P03 allows local users to gain privileges via a Trojan horse tpfc.dll file in the...

VMware Workstation Multiple Vulnerabilities (VMSA-2012-0011)

The VMware Workstation install detected on the remote host is 7.x earlier than 7.1.6, or 8.0.x earlier than 8.0.4 and is, therefore, potentially affected by the following vulnerabilities : - A memory corruption error exists related to the handling of 'Checkpoint' files that can allow arbitrary co...

PT-2012-4625

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 8.0 through 8.0.3 VMware Player versions 4.0 through 4.0.3 VMware ESXi versions 3.5 through 5.0 VMware ESX versions 3.5 through 4.1 Description The issue allows remote attackers to cause a denial of service, resulti...

CVE-2012-3288: Improper Input Validation

VMware Workstation 7.x before 7.1.6 and 8.x before 8.0.4, VMware Player 3.x before 3.1.6 and 4.x before 4.0.4, VMware Fusion 4.x before 4.1.3, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 through 4.1 allow user-assisted remote attackers to execute arbitrary code on the host OS or cause a denia...

CVE-2012-3289: Improper Control of Generation of Code

VMware Workstation 8.x before 8.0.4, VMware Player 4.x before 4.0.4, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 through 4.1 allow remote attackers to cause a denial of service guest OS crash via crafted traffic from a remote virtual device...

PT-2012-4624

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 7.0 through 7.1.6 VMware Workstation versions 8.0 through 8.0.4 VMware Player versions 3.0 through 3.1.6 VMware Player versions 4.0 through 4.0.4 VMware Fusion versions 4.0 through 4.1.3 VMware ESXi versions 3.5...

PT-2012-4052

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 8.0.0 through 8.0.2 VMware Player versions 4.0.0 through 4.0.2 VMware Fusion versions 4.0.0 through 4.1.2 VMware ESXi versions 3.5 through 5.0 VMware ESX versions 3.5 through 4.1 Description The issue arises from th...

CVE-2012-2450: Undefined Security Weakness

VMware Workstation 8.x before 8.0.3, VMware Player 4.x before 4.0.3, VMware Fusion 4.x before 4.1.2, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 through 4.1 do not properly register SCSI devices, which allows guest OS users to cause a denial of service invalid write operation and VMX process...

CVE-2012-2449: Improper Restriction of Operations within the Bounds of a Memory Buffer

VMware Workstation 8.x before 8.0.3, VMware Player 4.x before 4.0.3, VMware Fusion 4.x through 4.1.2, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 through 4.1 do not properly configure the virtual floppy device, which allows guest OS users to cause a denial of service out-of-bounds write...

PT-2012-4053

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 8.0.0 through 8.0.2 VMware Player versions 4.0.0 through 4.0.2 VMware Fusion versions 4.0.0 through 4.1.1 VMware ESXi versions 3.5 through 5.0 VMware ESX versions 3.5 through 4.1 Description The issue allows guest O...

VMware Products Local Privilege Escalation (VMSA-2012-0007)

The VMware Workstation installation detected on the remote host is 8.x earlier than 8.0.2 and thus is potentially affected by a local privilege escalation vulnerability because the access control list of the VMware Tools folder is incorrectly set. By exploiting this issue, a local attacker could...

CVE-2012-1518: Undefined Security Weakness

VMware Workstation 8.x before 8.0.2, VMware Player 4.x before 4.0.2, VMware Fusion 4.x before 4.1.2, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 through 4.1 use an incorrect ACL for the VMware Tools folder, which allows guest OS users to gain guest OS privileges via unspecified vectors...

PT-2012-3324

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 8.0.0 through 8.0.1 VMware Player versions 4.0.0 through 4.0.1 VMware Fusion versions 4.0.0 through 4.1.1 VMware ESXi versions 3.5 through 5.0 VMware ESX versions 3.5 through 4.1 Description The issue arises from an...

VMware Products UDF File Systems Buffer Overflow Vulnerability (Windows)

The host is installed with VMWare products and are prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: secpodvmwareprdtsudffilesysbofvulnwin.nasl 7019 2017-08-29 11:51:27Z teissa $ VMware Products UDF File Systems Buffer Overflow Vulnerability Windows Authors: Rachana Shetty...