CVE-2008-1361

The CVE-2008-1361 issue affects multiple VMware products (Workstation 6.0.x up to 6.0.3, 5.5.x up to 5.5.6; Player 2.0.x up to 2.0.3 and 1.0.x up to 1.0.6; ACE 2.0.x up to 2.0.1 and 1.0.x up to 1.0.5; Server 1.0.x up to 1.0.5 on Windows). The root cause is an unspecified manipulation that causes ...

CVE-2007-5671

CVE-2007-5671 is a VMware Tools local privilege-escalation issue in the guest HGFS driver (HGFS.sys) present in VMware Workstation/Player/ACE/Server and ESX/ESXi components. The flaw arises from improper validation of arguments to user-mode IOCTLs to .\hgfs, enabling a guest user to modify kernel...

CVE-2008-1340

VMware VMCI vulnerability CVE-2008-1340 affects VMware Workstation 6.0.x prior to 6.0.3, VMware Player 2.0.x prior to 2.0.3, and VMware ACE 2.0.x prior to 2.0.1. The issue allows attackers to cause a denial of service (host OS crash) via crafted VMCI calls that trigger memory exhaustion and memor...

CVE-2008-0967

CVE-2008-0967 describes a local privilege escalation in vmware-authd due to an untrusted library search path. A local user can gain privileges by manipulating a library path option in a configuration file. Affected products include VMware Workstation 5.x (before 5.5.7 build 91707), VMware Worksta...

CVE-2008-1364

CVE-2008-1364 describes an unspecified vulnerability in the DHCP service across multiple VMware products (Workstation 5.5.x before 5.5.6, Player 1.0.x before 1.0.6, ACE 1.0.x before 1.0.5, Server 1.0.x before 1.0.5, Fusion 1.1.x before 1.1.1) that allows an attacker to cause a denial of service. ...

CVE-2008-4916

CVE-2008-4916 describes a denial-of-service vulnerability in the guest virtual device driver that could crash the host OS. The issue affects VMware products including VMware Workstation (pre-5.5.9/6.x), VMware Player (pre-1.0.9/2.x), VMware ACE (pre-1.0.8/2.x), VMware Server (1.x before 1.0.8/2.0...

CVE-2008-1362

CVE-2008-1362 affects VMware products (Workstation, Player, ACE, Server) on Windows. The vulnerability arises from insecurely created named pipes used by the authd process, allowing a local attacker to impersonate authd and gain privileges or cause a denial of service. Affected versions include V...

CVE-2007-5438

CVE-2007-5438 involves an unspecified vulnerability in a VMware ActiveX control (Reconfig.DLL) that could allow local users to cause a denial of service to the Virtual Disk Mount Service (vmount2.exe). Affected products and build ranges include VMware Workstation 5.5.x <5.5.8 build 108000, Wor...

CVE-2008-3697

CVE-2008-3697 concerns a remote DoS in VMware Server via an ISAPI extension. The issue is triggered by sending a malformed request to an ISAPI extension (iisperl.dll), which can cause the IIS service to terminate. VMware documents that the vulnerable extension is part of VMware Server prior to 1....