VMWare Workstation and Horizon View Client Read Across Boundaries Vulnerability

VMWare Workstation and Horizon View Client are both products of VMware. The former is a set of desktop virtualization software; the latter is a client device that allows access to VMware Horizon desktops from any location. An out-of-bounds read vulnerability exists in the TPView.dll file in VMwar...

Unspecified Vulnerability in VMware Workstation and Fusion VMware Tools

VMWare Workstation and Fusion are both desktop virtual computer software from VMware, the former provides virtual machine functionality to run multiple different operating systems at the same time, and the latter is a virtual machine software used to run Windows applications on a Mac.VMware Tools...

VMSA-2018-0005:VMware Workstation, and Fusion updates resolve use-after-free and integer-overfLOW vulnerabilities

VMSA-2018-0005 VMware Workstation, and Fusion updates resolve use-after - free and integer-overflow vulnerabilities VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2018-0005 VMware Security Advisory Severity: Critical VMware Security Advisory Synopsis: VMware Workstation, and...

VMware V4H and V4PA desktop agents elevation of privilege vulnerability

VMware V4H and V4PA desktop agents are both products of VMware, Inc. VMware V4H is a suite of IT operations management software for Horizon a cloud-based platform.V4PA desktop agents is an IT operations management desktop application. An elevation of privilege vulnerability exists in VMware V4H a...

VMSA-2018-0004:VMware vSphere, Workstation and Fusion updates add Hypervisor-Assisted Guest Remediation for speculative execution issue

VMSA-2018-0004.3 VMware vSphere, Workstation and Fusion updates add Hypervisor-Assisted Guest Mitigations for speculative execution issue VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2018-0005 VMware Security Advisory Severity: Critical VMware Security Advisory Synopsis:...

VMware Workstation - ALSA Config File Local Privilege Escalation Exploit

This Metasploit module exploits a vulnerability in VMware Workstation Pro and Player on Linux which allows users to escalate their privileges by using an ALSA configuration file to load and execute a shared object as root when launching a virtual machine with an attached sound card. This Metasplo...

CVE-2017-4946

The VMware V4H and V4PA desktop agents 6.x before 6.5.1 contain a privilege escalation vulnerability. Successful exploitation of this issue could result in a low privileged windows user escalating their privileges to SYSTEM...

CVE-2017-4948

VMware Workstation 14.x before 14.1.0 and 12.x and Horizon View Client 4.x before 4.7.0 contain an out-of-bounds read vulnerability in TPView.dll. On Workstation, this issue in conjunction with other bugs may allow a guest to leak information from host or may allow for a Denial of Service on the...

CVE-2017-4948

VMware Workstation 14.x before 14.1.0 and 12.x and Horizon View Client 4.x before 4.7.0 contain an out-of-bounds read vulnerability in TPView.dll. On Workstation, this issue in conjunction with other bugs may allow a guest to leak information from host or may allow for a Denial of Service on the...

CVE-2017-4945

VMware Workstation 14.x and 12.x and Fusion 10.x and 8.x contain a guest access control vulnerability. This issue may allow program execution via Unity on locked Windows VMs. VMware Tools must be updated to 10.2.0 for each VM to resolve CVE-2017-4945. VMware Tools 10.2.0 is consumed by Workstatio...

CVE-2017-4945

VMware Workstation 14.x and 12.x and Fusion 10.x and 8.x contain a guest access control vulnerability. This issue may allow program execution via Unity on locked Windows VMs. VMware Tools must be updated to 10.2.0 for each VM to resolve CVE-2017-4945. VMware Tools 10.2.0 is consumed by Workstatio...

CVE-2017-4946

The VMware V4H and V4PA desktop agents 6.x before 6.5.1 contain a privilege escalation vulnerability. Successful exploitation of this issue could result in a low privileged windows user escalating their privileges to SYSTEM...

Out-of-bounds

VMware Workstation 14.x before 14.1.0 and 12.x and Horizon View Client 4.x before 4.7.0 contain an out-of-bounds read vulnerability in TPView.dll. On Workstation, this issue in conjunction with other bugs may allow a guest to leak information from host or may allow for a Denial of Service on the...

Privilege escalation

The VMware V4H and V4PA desktop agents 6.x before 6.5.1 contain a privilege escalation vulnerability. Successful exploitation of this issue could result in a low privileged windows user escalating their privileges to SYSTEM...

Design/Logic Flaw

VMware Workstation 14.x and 12.x and Fusion 10.x and 8.x contain a guest access control vulnerability. This issue may allow program execution via Unity on locked Windows VMs. VMware Tools must be updated to 10.2.0 for each VM to resolve CVE-2017-4945. VMware Tools 10.2.0 is consumed by Workstatio...

CVE-2017-4945

CVE-2017-4945 affects VMware Workstation (14.x, 12.x), Fusion (10.x, 8.x) and VMware Tools. Root cause: guest access control weakness that may allow code execution via Unity on locked Windows VMs. Affected components/versions: VMware Tools prior to 10.2.0; Tools 10.2.0 fixes this issue and is pac...

CVE-2017-4948

VMware Workstation 14.x before 14.1.0 and 12.x and Horizon View Client 4.x before 4.7.0 contain an out-of-bounds read vulnerability in TPView.dll. On Workstation, this issue in conjunction with other bugs may allow a guest to leak information from host or may allow for a Denial of Service on the...

CVE-2017-4945

VMware Workstation 14.x and 12.x and Fusion 10.x and 8.x contain a guest access control vulnerability. This issue may allow program execution via Unity on locked Windows VMs. VMware Tools must be updated to 10.2.0 for each VM to resolve CVE-2017-4945. VMware Tools 10.2.0 is consumed by Workstatio...

CVE-2017-4948

CVE-2017-4948 is an out-of-bounds read flaw in TPView.dll affecting VMware Workstation (14.x before 14.1.0 and 12.x) and Horizon View Client (4.x before 4.7.0). Exploitation is tied to scenarios where virtual printing is enabled, which is not by default in Workstation but is by default in Horizon...

CVE-2017-4946

The VMware V4H and V4PA desktop agents 6.x before 6.5.1 contain a privilege escalation vulnerability. Successful exploitation of this issue could result in a low privileged windows user escalating their privileges to SYSTEM...