VMSA-2019-0009:VMware Tools and Workstation updates address out of bounds read and use-after-free vulnerabilities.

VMware Security Advisories Advisory ID| VMSA-2019-0009 ---|--- Advisory Severity| Important CVSSv3 Range| 7.1-8.5 Synopsis| VMware Tools and Workstation updates address out of bounds read and use-after-free vulnerabilities. CVE-2019-5522, CVE-2019-5525 Issue Date| 2019-06-06 Updated On| 2019-06-0...

HP Workstation BIOS Code Execution Vulnerability

HP Workstation is a high-performance desktop computer from Hewlett-Packard HP in the U.S. BIOS is one of the basic input and output systems. A security vulnerability exists in the HP Workstation BIOS UEFI Firmware. An attacker could exploit this vulnerability to tamper with the runtime BIOS code...

Default credentials

HP has identified a security vulnerability with some versions of Workstation BIOS UEFI Firmware where the runtime BIOS code could be tampered with if the TPM is disabled. This vulnerability relates to Workstations whose TPM is enabled by default...

Default credentials

HP has identified a security vulnerability with some versions of Workstation BIOS UEFI Firmware where the runtime BIOS code could be tampered with if the TPM is disabled. This vulnerability relates to Workstations whose TPM is disabled by default...

CVE-2019-6321

HP has identified a security vulnerability with some versions of Workstation BIOS UEFI Firmware where the runtime BIOS code could be tampered with if the TPM is disabled. This vulnerability relates to Workstations whose TPM is disabled by default...

CVE-2019-6322

HP has identified a security vulnerability with some versions of Workstation BIOS UEFI Firmware where the runtime BIOS code could be tampered with if the TPM is disabled. This vulnerability relates to Workstations whose TPM is enabled by default...

CVE-2019-6322

Summary: CVE-2019-6322 affects HP Workstation BIOS (UEFI firmware). The runtime BIOS code can be tampered if TPM is disabled, with impact on systems where TPM is enabled by default. Root cause (per HP): vulnerability in firmware allowing tampering of BIOS code under certain TPM configurations. Im...

CVE-2019-6322

HP has identified a security vulnerability with some versions of Workstation BIOS UEFI Firmware where the runtime BIOS code could be tampered with if the TPM is disabled. This vulnerability relates to Workstations whose TPM is enabled by default...

CVE-2019-6321

HP has identified a security vulnerability with some versions of Workstation BIOS UEFI Firmware where the runtime BIOS code could be tampered with if the TPM is disabled. This vulnerability relates to Workstations whose TPM is disabled by default...

CVE-2019-6321

HP CVE-2019-6321 affects some HP Workstation BIOS (UEFI firmware) where runtime BIOS code could be tampered if TPM is disabled. The HP PSRT note lists potential impacts as Escalation of Privilege, Denial of Service, Information Disclosure, Loss of Confidentiality/Integrity, with TPM-enabled by de...

VMware Workstation e1000 Memory Corruption Privilege Escalation Vulnerability

This vulnerability allows local attackers to execute arbitrary code on vulnerable installations of VMware Workstation. An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the...

VMware Workstation 15.1.0 - DLL Hijacking Exploit

Exploit for windows platform in category local exploits --------------------------------------------------------- Title: VMware Workstation DLL hijacking DLLIMPORT void SHGetFolderPathW MessageBox0, "s1kr10s", "VMWare-Poc", MBICONINFORMATION; exit0; --------------------------...

VMware Workstation 15.1.0 - DLL Hijacking

--------------------------------------------------------- Title: VMware Workstation DLL hijacking DLLIMPORT void SHGetFolderPathW MessageBox0, "s1kr10s", "VMWare-Poc", MBICONINFORMATION; exit0; -------------------------- https://www.vmware.com/security/advisories/VMSA-2019-0007.html...

VMware Workstation 15.1.0 - DLL Hijacking

VMware Workstation 15.1.0 - DLL Hijacking --------------------------------------------------------- Title: VMware Workstation DLL hijacking DLLIMPORT void SHGetFolderPathW MessageBox0, "s1kr10s", "VMWare-Poc", MBICONINFORMATION; exit0; --------------------------...

VMware Workstation 15.x < 15.1.0 DLL-hijacking Vulnerability (VMSA-2019-0007)

The version of VMware Workstation installed on the remote host is 15.x prior to 15.1.0. It is, therefore, affected by DLL-hijacking vulnerability. An authenticated, attacker can exploit this to gain privileged or administrator access to the host system. C Tenable Network Security, Inc...

VMware Workstation DLL Hijacking

--------------------------------------------------------- Title: VMware Workstation DLL hijacking DLLIMPORT void SHGetFolderPathW MessageBox0, "s1kr10s", "VMWare-Poc", MBICONINFORMATION; exit0; -------------------------- https://www.vmware.com/security/advisories/VMSA-2019-0007.html...

Design/Logic Flaw

VMware Workstation 15.x before 15.1.0 contains a DLL hijacking issue because some DLL files are improperly loaded by the application. Successful exploitation of this issue may allow attackers with normal user privileges to escalate their privileges to administrator on a windows host where...

CVE-2019-5526

VMware Workstation 15.x before 15.1.0 contains a DLL hijacking issue because some DLL files are improperly loaded by the application. Successful exploitation of this issue may allow attackers with normal user privileges to escalate their privileges to administrator on a windows host where...

CVE-2019-5526

VMware Workstation 15.x before 15.1.0 contains a DLL hijacking issue because some DLL files are improperly loaded by the application. Successful exploitation of this issue may allow attackers with normal user privileges to escalate their privileges to administrator on a windows host where...

CVE-2019-5526

Summary: CVE-2019-5526 affects VMware Workstation (15.x before 15.1.0). The issue is a DLL hijacking flaw where certain DLLs are loaded improperly, notably involving shfolder.dll and SHGetFolderPathW. Impact: successful exploitation can escalate from normal user privileges to administrator on a W...