CVE-2008-2100

CVE-2008-2100 corresponds to VMware VIX API Multiple Buffer Overflow Vulnerabilities (VMSA-2008-0009). It affects VIX API 1.1.x before 1.1.4 build 93057 across host products (VMware Workstation 5.x/6.x, VMware Player 1.x/2.x, VMware ACE 2.x, VMware Server 1.x, VMware Fusion 1.x, VMware ESXi 3.5, ...

CVE-2010-1139

CVE-2010-1139 is a format-string vulnerability in VMware's vmrun (VMware VIX API 1.6.x) that may allow local users to execute code with the privileges of the listing user. Affected products/versions include VMware Workstation 6.5.x (before 6.5.4 build 246459), VMware Player 2.5.x (before 2.5.4 bu...

CVE-2009-0778

CVE-2009-0778 affects the Linux kernel prior to 2.6.25 when configured as a router with a REJECT route. The icmp_send code in net/ipv4/icmp.c can mishandle the Protocol Independent Destination (DST) cache, potentially leaking DST state and allowing remote attackers to cause a denial of service (c...

CVE-2008-1340

VMware VMCI vulnerability CVE-2008-1340 affects VMware Workstation 6.0.x prior to 6.0.3, VMware Player 2.0.x prior to 2.0.3, and VMware ACE 2.0.x prior to 2.0.1. The issue allows attackers to cause a denial of service (host OS crash) via crafted VMCI calls that trigger memory exhaustion and memor...

CVE-2008-4917

CVE-2008-4917 is a memory corruption issue in VMware VM hardware where a guest can trigger an arbitrary physical-memory write, affecting VMware Workstation 5.5.8 and earlier, 6.x, VMware Player 1.0.8 and 2.x, VMware Server 1.0.9 and earlier, and ESXi/ESX 3.x. Root cause: mis-handling of a guest-t...

CVE-2008-1362

CVE-2008-1362 affects VMware products (Workstation, Player, ACE, Server) on Windows. The vulnerability arises from insecurely created named pipes used by the authd process, allowing a local attacker to impersonate authd and gain privileges or cause a denial of service. Affected versions include V...

CVE-2008-1364

CVE-2008-1364 describes an unspecified vulnerability in the DHCP service across multiple VMware products (Workstation 5.5.x before 5.5.6, Player 1.0.x before 1.0.6, ACE 1.0.x before 1.0.5, Server 1.0.x before 1.0.5, Fusion 1.1.x before 1.1.1) that allows an attacker to cause a denial of service. ...

CVE-2008-3698

CVE-2008-3698 is a local privilege-escalation in the host OS via VMware OpenProcess issue. Affected host components include VMware Workstation (5.x, 6.x), VMware Server, VMware Player (1.x/2.x), VMware ACE (1.x/2.x). Exploitation would allow local users to run arbitrary code with elevated host pr...

CVE-2010-4296

CVE-2010-4296 affects VMware products including Workstation 7.x up to 7.1.2 (Linux), Player 3.1.x up to 3.1.2 (Linux), Server 2.0.2 (Linux), and Fusion 3.1.x up to 3.1.2. The issue is a library loading flaw in vmware-mount that lets local host users load arbitrary shared objects with root privile...

CVE-2009-1147

CVE-2009-1147 affects VMware VMCI (vmci.sys) and enables privilege escalation on Windows-based hosts/guests. The issue is described in VMware’s VMSA-2009-0005 advisory and is linked to VMCI IOCTL handling that can be abused by a local user with admin rights to gain SYSTEM privileges. A remediatio...

CVE-2010-0686

Summary: CVE-2010-0686 concerns VMware WebAccess in VMware VirtualCenter (2.0.2/2.5), VMware Server 2.0, and VMware ESX (3.0.3/3.5). The issue is a URL forwarding vulnerability where the WebAccess proxy functionality does not properly validate/limit inbound requests, allowing an attacker to spoof...

CVE-2008-1363

VMware product family on Windows (Workstation 6.0.x < 6.0.3, Workstation 5.5.x < 5.5.6, Player 2.0.x < 2.0.3, Player 1.0.x < 1.0.6, ACE 2.0.x < 2.0.1 and 1.0.x < 1.0.5, Server 1.0.x

CVE-2007-2491

CVE-2007-2491 concerns the PIIX4 power management subsystem in VMware Workstation 5.5.3.34685 and VMware Server 1.0.1.29996. A crafted poke to I/O port 0x1004 lets a local user write to arbitrary memory, enabling a Denial of Service (virtual machine crash) or other unspecified impact. The issue i...

CVE-2007-5618

CVE-2007-5618 refers to an unquoted Windows search path vulnerability in VMware products (Workstation, Player, Server, ACE) prior to specified fixed versions. The issue allows local users to gain privileges by exploiting improperly quoted paths in Authorization and other services. Affected ranges...

CVE-2007-5619

CVE-2007-5619 describes an unspecified vulnerability in VMware Server before 1.0.4 that causes user passwords to be recorded in cleartext in server logs , potentially allowing a local attacker to gain privileges. The NVD assesses a high impact (CVSS v2: base score 7.2; LOCAL access, low attack co...