CVE-2017-4936

VMware Workstation 12.x before 12.5.8 and Horizon View Client for Windows 4.x before 4.6.1 contain an out-of-bounds read vulnerability in JPEG2000 parser in the TPView.dll. On Workstation, this may allow a guest to execute code or perform a Denial of Service on the Windows OS that runs Workstatio...

CVE-2017-4938

VMware Workstation 12.x before 12.5.8 and Fusion 8.x before 8.5.9 contain a guest RPC NULL pointer dereference vulnerability. Successful exploitation of this issue may allow attackers with normal user privileges to crash their VMs...

CVE-2017-4938

VMware Workstation 12.x before 12.5.8 and Fusion 8.x before 8.5.9 contain a guest RPC NULL pointer dereference vulnerability. Successful exploitation of this issue may allow attackers with normal user privileges to crash their VMs...

CVE-2017-4938

CVE-2017-4938 is a guest RPC NULL pointer dereference vulnerability in VMware Workstation 12.x before 12.5.8 and VMware Fusion 8.x before 8.5.9 that can crash VMs when exploited with normal user privileges. VMware issued VMSA-2017-0018 and updates; remediation is to upgrade to Workstation 12.5.8 ...

CVE-2017-4936

VMware Workstation 12.x before 12.5.8 and Horizon View Client for Windows 4.x before 4.6.1 contain an out-of-bounds read vulnerability in JPEG2000 parser in the TPView.dll. On Workstation, this may allow a guest to execute code or perform a Denial of Service on the Windows OS that runs Workstatio...

CVE-2017-4936

CVE-2017-4936 is an out-of-bounds read vulnerability in the JPEG2000 parser (TPView.dll) affecting VMware Workstation 12.x before 12.5.8 and Horizon View Client for Windows 4.x before 4.6.1. The issue may allow a guest to execute code or cause a Denial of Service on the host or View desktop. VMwa...

CVE-2017-4934

CVE-2017-4934 affects VMware Workstation 12.x (pre-12.5.8) and VMware Fusion 8.x (pre-8.5.9), with a heap buffer‑overflow in the VMNAT device that may allow a guest to execute code on the host. The issue is local: an attacker on the guest can trigger code execution in the host context. Related ad...

CVE-2017-4935

CVE-2017-4935 affects VMware Workstation 12.x prior to 12.5.8 and Horizon View Client for Windows 4.x prior to 4.6.1. The vulnerability is an out-of-bounds write in the JPEG2000 parser within TPView.dll that can allow a guest operating on the host to execute code or cause a Denial of Service on t...

CVE-2017-4937

CVE-2017-4937 refers to an out-of-bounds read vulnerability in the JPEG2000 parser (TPView.dll) affecting VMware Workstation 12.x prior to 12.5.8 and Horizon View Client for Windows 4.x prior to 4.6.1. Exploitation can lead to code execution or Denial of Service on the host OS in scenarios where ...

CVE-2017-4937

VMware Workstation 12.x before 12.5.8 and Horizon View Client for Windows 4.x before 4.6.1 contain an out-of-bounds read vulnerability in JPEG2000 parser in the TPView.dll. On Workstation, this may allow a guest to execute code or perform a Denial of Service on the Windows OS that runs Workstatio...

CVE-2017-4934

VMware Workstation 12.x before 12.5.8 and Fusion 8.x before 8.5.9 contain a heap buffer-overflow vulnerability in VMNAT device. This issue may allow a guest to execute code on the host...

KLA11143 Multiple vulnerabilities in VMware Workstation, Fusion and Horizon View Client

Multiple serious vulnerabilities have been found in VMware Workstation, Fusion and Horizon View Client. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code or bypass security restrictions. Below is a complete list of vulnerabilities: 1. A heap...

VMware Workstation, Fusion and Horizon View Client updates resolve multiple security vulnerabilities

a. Heap buffer-overflow vulnerability in VMNAT device VMware Workstation and Fusion contain a heap buffer-overflow vulnerability in VMNAT device. This issue may allow a guest to execute code on the host. VMware would like to thank Jun Mao of Tencent PC Manager working with Trend Micro's Zero Day...

VMSA-2017-0018:VMware Workstation, Fusion and Horizon View Client updates resolve multiple security vulnerabilities

VMSA-2017-0018.1 VMware Workstation, Fusion and Horizon View Client updates resolve multiple security vulnerabilities VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2017-0018.1 VMware Security Advisory Severity: Critical VMware Security Advisory Synopsis: VMware Workstation,...

RedHat Update for httpd RHSA-2017:2972-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Cybele Software Thinfinity Remote Desktop Workstation Directory Traversal Vulnerability

Cybele Software Thinfinity Remote Desktop Workstation is a browser-based remote desktop tool from Cybele Software, USA. A directory traversal vulnerability exists in Cybele Software Thinfinity Remote Desktop Workstation version 3.0.0.3 32-bit and 64-bit. A remote attacker can exploit this...

CVE-2015-1429

Directory traversal vulnerability in Cybele Software Thinfinity Remote Desktop Workstation 3.0.0.3 32-bit and 64-bit allows remote attackers to download arbitrary files via a .. dot dot in an unspecified parameter...

CVE-2015-1429

CVE-2015-1429 affects Cybele Software Thinfinity Remote Desktop Workstation (version 3.0.0.3, 32-bit and 64-bit). A directory traversal vulnerability exists where a remote attacker can download arbitrary files via a .. (dot dot) in an unspecified parameter. Multiple trusted sources (CNVD-2017-308...

RedHat Update for nss RHSA-2017:2832-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

VMware Workstation 12.x < 12.5.7 Multiple Vulnerabilities (VMSA-2017-0015)

The version of VMware Workstation installed on the remote Windows host is 12.x prior to 12.5.7. It is, therefore, affected by the following vulnerabilities: - A remote code execution vulnerability exists in VMware workstation within the SVGA device. An attacker with user access can exploit this t...