CVE-2018-6977

CVE-2018-6977 affects VMware ESXi (6.7/6.5/6.0), Workstation (14/15.x) and Fusion (10/11.x) via an infinite loop in a 3D shader that can cause a guest VM to become unresponsive and, in some cases, make the host/other VMs unresponsive. Public details describe a denial-of-service condition triggere...

VMware Releases Security Advisory

VMware has released a security advisory to address a vulnerability in ESXi, Workstation, and Fusion. An attacker could exploit this vulnerability to cause a denial-of-service condition. NCCIC encourages users and administrators to review VMware Security Advisory VMSA-2018-0025 and apply the...

Intel Unified Shader Compiler for Intel Graphics Accelerator Pointer Corruption

Summary An exploitable pointer corruption vulnerability exists in the Intel’s Unified Shader Compiler for IntelR Graphics Accelerator 10.18.14.4889. A specially crafted pixel shader can cause a pointer corruption resulting in at least denial of service or, if exploited successfully, code executio...

VMSA-2018-0025:VMware ESXi, Workstation, and Fusion workarounds address a denial-of-service vulnerability

VMSA-2018-0025 VMware ESXi, Workstation, and Fusion workarounds address a denial-of-service vulnerability VMware Security Advisory VMware Security AdvisoryAdvisory ID: VMSA-2018-0025 VMware Security AdvisorySeverity: Important VMware Security AdvisorySynopsis: VMware ESXi, Workstation, and Fusion...

VMware Workstation e1000 Buffer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to execute arbitrary code on vulnerable installations of VMware Workstation. An attacker must first obtain the ability to execute low-privileged code on the guest system in order to exploit this vulnerability. The specific flaw exists within the handling ...

September 2018 Patch Tuesday – 61 Vulns, FragmentSmack, Hyper-V Escape

In this month’s Patch Tuesday release there are 61 vulnerabilities patched with 17 Criticals. Out of the criticals, most are browser-related, with the rest including Windows, Hyper-V, and .net Framework. A vulnerability CVE-2018-8475 in Windows' image parsing has been publicly disclosed, in...

Directory traversal

okular version 18.08 and earlier contains a Directory Traversal vulnerability in function "unpackDocumentArchive..." in "core/document.cpp" that can result in Arbitrary file creation on the user workstation. This attack appear to be exploitable via he victim must open a specially crafted Okular...

CVE-2018-1000801

okular version 18.08 and earlier contains a Directory Traversal vulnerability in function "unpackDocumentArchive..." in "core/document.cpp" that can result in Arbitrary file creation on the user workstation. This attack appear to be exploitable via he victim must open a specially crafted Okular...

Directory traversal

A directory traversal vulnerability with remote code execution in Prim'X Zed! FREE through 1.0 build 186 and Zed! Limited Edition through 6.1 build 2208 allows creation of arbitrary files on a user's workstation using crafted ZED! containers because the watermark loading function can place an...

Lansweeper Arbitrary Code Execution Vulnerability

Lansweeper is a network-assisted software that lists Windows hardware from Lansweeper Belgium. An arbitrary code execution vulnerability exists in Lansweeper. A remote attacker can use a specially crafted Windows service to execute arbitrary code on an administrator's workstation...

Code injection

Lansweeper 4.x through 6.x before 6.0.0.48 allows attackers to execute arbitrary code on the administrator's workstation via a crafted Windows service...

VMware Workstation 14.x < 14.1.3 Out-of-Bounds Write (VMSA-2018-0022)

The version of VMware Workstation installed on the remote Windows host is 14.x prior to 14.1.3. It is, therefore, missing a security update that fixes an out-of-bounds write vulnerability. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid111979; scriptversion"1.5";...

VMware Workstation 14.x < 14.1.3 Out-of-Bounds Write (VMSA-2018-0022) (Linux)

The version of VMware Workstation installed on the remote Linux host is 14.x prior to 14.1.3. It is, therefore, missing a security update that fixes an out-of-bounds write vulnerability. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid111976; scriptversion"1.6";...

Microsoft Windows: Audit Other Logon/Logoff Events

Audit Other Logon/Logoff Events determines whether Windows generates audit events for other logon or logoff events. These other logon or logoff events include: - A Remote Desktop session connects or disconnects. - A workstation is locked or unlocked. - A screen saver is invoked or dismissed. - A...

VMWare Workstation and Fusion e1000 Buffer Overflow Vulnerability

VMWare Workstation and Fusion are both desktop virtual computer software from VMware. The former provides virtual machine functionality that allows you to run several different operating systems at the same time, while the latter is virtual machine software used to run Windows applications on a...

CVE-2018-6973

VMware Workstation 14.x before 14.1.3 and Fusion 10.x before 10.1.3 contain an out-of-bounds write vulnerability in the e1000 device. This issue may allow a guest to execute code on the host...

Out-of-bounds

VMware Workstation 14.x before 14.1.3 and Fusion 10.x before 10.1.3 contain an out-of-bounds write vulnerability in the e1000 device. This issue may allow a guest to execute code on the host...

CVE-2018-6973

VMware Workstation 14.x before 14.1.3 and Fusion 10.x before 10.1.3 contain an out-of-bounds write vulnerability in the e1000 device. This issue may allow a guest to execute code on the host...

CVE-2018-6973

CVE-2018-6973 affects VMware Workstation 14.x prior to 14.1.3 and VMware Fusion 10.x prior to 10.1.3. The vulnerability is an out-of-bounds write in the e1000 device that may allow a guest to execute code on the host. ZDI notes that exploitation requires the attacker to run code on the guest (loc...

VMware Workstation 14.x < 14.1.3 Speculative Execution Side Channel Vulnerability (Foreshadow) (VMSA-2018-0020) (Linux)

The version of VMware Workstation installed on the remote Linux host is 14.x prior to 14.1.3. It is, therefore, affected by a speculative execution side channel attack known as L1 Terminal Fault L1TF. An attacker who successfully exploited L1TF may be able to read privileged data across trust...