CVE-2007-4593

CVE-2007-4593 refers to an unspecified vulnerability in vstor2-ws60.sys used by VMware Workstation 6.0 , enabling local users to cause a host OS denial of service. The related CVE-2007-4591 provides explicit detail: a DoS/privilege escalation possibility by sending a small file buffer size to the...

CVE-2007-4591

vstor-ws60.sys in VMWare Workstation 6.0 allows local users to cause a denial of service host operating system crash and possibly gain privileges by sending a small file buffer size value to the FsSetVolumeInformation IOCTL handler with an FsSetFileInformation subcode...

Design/Logic Flaw

vstor-ws60.sys in VMWare Workstation 6.0 allows local users to cause a denial of service host operating system crash and possibly gain privileges by sending a small file buffer size value to the FsSetVolumeInformation IOCTL handler with an FsSetFileInformation subcode...

CVE-2007-4591

vstor-ws60.sys in VMWare Workstation 6.0 allows local users to cause a denial of service host operating system crash and possibly gain privileges by sending a small file buffer size value to the FsSetVolumeInformation IOCTL handler with an FsSetFileInformation subcode...

CVE-2007-4591

CVE-2007-4591 concerns a local denial of service (host OS crash) and potential privilege escalation in VMware Workstation 6.0. The issue is tied to the driver vstor-ws60.sys; by sending a small file buffer size value to the FsSetVolumeInformation IOCTL handler with an FsSetFileInformation subcode...

VMware Workstation VMStor-60驱动本地溢出漏洞

BUGTRAQ ID: 25441 VMware Workstation是一款非常流行的虚拟PC机软件。 VMware Workstation的vmstor-60驱动中存在缓冲区溢出漏洞，本地攻击者可能利用此漏洞提升自己的权限。 如果向该驱动发送的IOCTL代码FsSetVoleInformation的子代码FsSetFileInformation设置了很大的缓冲区，但将其最大大小报告为1024字节的话，就可能触发这个溢出，导致以内核权限执行任意指令。 VMWare Workstation 6.0 临时解决方法： 在设备管理器中禁用vstor-ws60驱动。 厂商补丁： VMWare...

security vulnerability in VMware

vulnerable software: VMware Workstation 6.0 for Windows, possible some other VMware products as well type of vulnerability: DoS, potential privilege escalation I found a vulnerability in VMware Workstation 6.0 which allows an unprivileged user in the host OS to crash the system and potentially ru...

VMware intraprocesslogging.dll ActiveX控件任意文件覆盖漏洞

BUGTRAQ ID: 25110 VMware Workstation是一款非常流行的虚拟PC机软件。 VMware intraprocesslogging.dll ActiveX控件实现上存在漏洞，远程攻击者可能利用此漏洞在用户系统上执行任意指令。 VMware中所捆绑的vielib.dll库中的StartProcess方式没有验证是否被应用程序或恶意用户调用，如果用户受骗访问了恶意网页的话，调用了该库的应用程序就可能导致以登录用户的权限执行任意指令。 VMWare Workstation 5.5.3 build 42958 临时解决方法：...

krb5 security update

CentOS Errata and Security Advisory CESA-2007:0562 Updated krb5 packages that fix several security flaws are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Kerberos is a network authenticati...

krb5 security update

CentOS Errata and Security Advisory CESA-2007:0384 Updated krb5 packages that fix several security flaws are now available for Red Hat Enterprise Linux 2.1 and 3. This update has been rated as having critical security impact by the Red Hat Security Response Team. Kerberos is a network...

VMware Workstation共享文件夹目录遍历漏洞

VMware Workstation是一款非常流行的虚拟PC机软件。 VMware Workstation的实现上存在漏洞，远程攻击者可能利用此漏洞非授权访问系统文件。 VMware Workstation的共享文件夹功能允许与虚拟的guest系统共享物理的host系统。由于验证文件名是否安全的代码中的漏洞，攻击者或guest系统中的恶意代码通过目录遍历读写主机系统中的文件。 VMWare VMWare Workstation 5.5.3 build 34685 临时解决方法： 禁用“共享文件夹”功能。 厂商补丁： VMWare ------...

CVE-2007-2491

The PIIX4 power management subsystem in EMC VMware Workstation 5.5.3.34685 and VMware Server 1.0.1.29996 allows local users to write to arbitrary memory locations via a crafted poke to I/O port 0x1004, triggering a denial of service virtual machine crash or other unspecified impact, a related iss...

Design/Logic Flaw

The PIIX4 power management subsystem in EMC VMware Workstation 5.5.3.34685 and VMware Server 1.0.1.29996 allows local users to write to arbitrary memory locations via a crafted poke to I/O port 0x1004, triggering a denial of service virtual machine crash or other unspecified impact, a related iss...

CVE-2007-2491

CVE-2007-2491 concerns the PIIX4 power management subsystem in VMware Workstation 5.5.3.34685 and VMware Server 1.0.1.29996. A crafted poke to I/O port 0x1004 lets a local user write to arbitrary memory, enabling a Denial of Service (virtual machine crash) or other unspecified impact. The issue i...

CVE-2007-2491

The PIIX4 power management subsystem in EMC VMware Workstation 5.5.3.34685 and VMware Server 1.0.1.29996 allows local users to write to arbitrary memory locations via a crafted poke to I/O port 0x1004, triggering a denial of service virtual machine crash or other unspecified impact, a related iss...

Design/Logic Flaw

VMware Workstation before 5.5.4, when running a 64-bit Windows guest on a 64-bit host, allows local users to "corrupt the virtual machine's register context" by debugging a local program and stepping into a "syscall instruction."...

Memory corruption

The memory management in VMware Workstation before 5.5.4 allows attackers to cause a denial of service Windows virtual machine crash by triggering certain general protection faults GPF...

CVE-2007-1876

VMware Workstation before 5.5.4, when running a 64-bit Windows guest on a 64-bit host, allows local users to "corrupt the virtual machine's register context" by debugging a local program and stepping into a "syscall instruction."...

CVE-2007-1069

The memory management in VMware Workstation before 5.5.4 allows attackers to cause a denial of service Windows virtual machine crash by triggering certain general protection faults GPF...

Directory traversal

Directory traversal vulnerability in the Shared Folders feature for VMware Workstation before 5.5.4, when a folder is shared, allows users on the guest system to write to arbitrary files on the host system via the "Backdoor I/O Port" interface...