CVE-2019-5540

CVE-2019-5540 affects VMware Workstation (15.x earlier than 15.5.1) and VMware Fusion (11.x earlier than 11.5.1). The vulnerability is an information disclosure in the vmnetdhcp component that can allow a guest VM attacker to leak memory from the host process, exposing sensitive information. Acco...

CVE-2020-3970

VMware CVE-2020-3970 affects ESXi (7.0 before 7.0.0-1.20.16321839; 6.7 before 202004101-SG; 6.5 before 202005401-SG), Workstation 15.x before 15.5.5, and Fusion 11.x before 11.5.5. It is an out-of-bounds read in the Shader functionality that can be triggered by a local user with non-administrativ...

CVE-2010-1142

CVE-2010-1142 affects VMware Tools across multiple VMware products (Workstation 6.5.x before 6.5.4, Player 2.5.x before 2.5.4, ACE 2.5.x before 2.5.4, Server 2.x before 2.0.2, Fusion 2.x before 2.0.6, ESXi/ESX family) where Windows guest users could gain privileges by placing a Trojan horse on th...

CVE-2012-1518

The CVE-2012-1518 issue affects VMware products due to an incorrect ACL on the VMware Tools folder that could let a guest OS user escalate privileges. Affected products/versions include VMware Workstation 8.x before 8.0.2, VMware Player 4.x before 4.0.2, VMware Fusion 4.x before 4.1.2, VMware ESX...

CVE-2008-0923

CVE-2008-0923 is a directory traversal vulnerability in VMware’s Shared Folders feature (HGFS) that affects desktop products including VMware Workstation up to 6.0.2, Workstation 5.5.4, VMware Player 2.0.2 and 1.0.4, and VMware ACE 2.0.2 and 1.0.2 . The root cause is a mismatch between input vali...

CVE-2014-1208

CVE-2014-1208 affects VMware products including Workstation 9.x (before 9.0.1), Player 5.x (before 5.0.1), Fusion 5.x (before 5.0.1), ESXi 4.0–5.1, and ESX 4.0–4.1. Root cause: handling of invalid port in VMX/ NFC path leads to guest-user–triggered denial of service (VMX process disruption). Impa...

CVE-2019-5541

CVE-2019-5541 describes an out-of-bounds write in the e1000e virtual network adapter affecting VMware Workstation 15.x before 15.5.1 and VMware Fusion 11.x before 11.5.1. The root cause is improper handling in the e1000e device, enabling potential host code execution from the guest or a denial-of...

CVE-2009-1805

CVE-2009-1805 concerns the VMware Descheduled Time Accounting DoS vulnerability. The issue affects multiple VMware products where the Descheduled Time Accounting Service is not running inside a Windows guest, allowing a guest OS user to cause a denial of service via unknown vectors. Affected prod...

CVE-2011-1787

The CVE-2011-1787 issue is a race condition in VMware HGFS (mount.vmhgfs) within the Host-Guest File System. Affected products include VMware Workstation 7.1.x (prior to 7.1.4), VMware Player 3.1.x (prior to 3.1.4), VMware Fusion 3.1.x (prior to 3.1.3), VMware ESXi 3.5–4.1, and VMware ESX 3.0.3–4...

CVE-2018-6963

CVE-2018-6963 affects VMware Workstation 14.x (pre-14.1.2) and VMware Fusion 10.x (pre-10.1.2). The root cause is a NULL pointer dereference in the RPC handler, enabling a local attacker with limited guest privileges to cause a denial of service on the guest OS. Connected advisories corroborate m...

CVE-2019-5515

VMware has released advisories addressing several critical out-of-bounds and TOCTOU issues across ESXi, Workstation, and Fusion related to the e1000/e1000e virtual network adapters and UHCI USB controllers. The CVEs tied to these flaws include CVE-2019-5515 (e1000/e1000e out-of-bounds write, gues...

CVE-2019-5539

CVE-2019-5539 describes a DLL hijacking flaw in Cortado Thinprint affecting VMware Workstation (15.x before 15.5.1) and Horizon View Agent (7.x before 7.5.4, 7.10.x before 7.10.1). The insecure DLL loading may allow a local attacker with normal user privileges to escalate to administrator on Wind...

CVE-2024-22270

CVE-2024-22270 affects VMware Workstation and Fusion HGFS, allowing a VM-local attacker with administrative privileges to read privileged data from hypervisor memory via HGFS. The vulnerability is listed across multiple scanners (NVD, OpenVAS, Nessus) with high confidentiality impact. Reported ex...

CVE-2008-0967

CVE-2008-0967 describes a local privilege escalation in vmware-authd due to an untrusted library search path. A local user can gain privileges by manipulating a library path option in a configuration file. Affected products include VMware Workstation 5.x (before 5.5.7 build 91707), VMware Worksta...

CVE-2010-4295

CVE-2010-4295 describes a race condition in the mounting process of vmware-mount that could allow a local host user to gain privileges via temporary files. Affected products include VMware Workstation 7.x (before 7.1.2 on Linux), VMware Player 3.1.x (before 3.1.2 on Linux), VMware Server 2.0.2 (L...

CVE-2012-1666

The CVE-2012-1666 entry describes an untrusted search path vulnerability in VMware Tools components across VMware Workstation (before 8.0.4), VMware Player (before 4.0.4), VMware Fusion (before 4.1.2), VMware View (before 5.1), and VMware ESX (4.1 before U3 and 5.0 before P03). The underlying iss...

CVE-2017-4949

CVE-2017-4949 concerns a use-after-free vulnerability in the VMware NAT service when IPv6 mode is enabled, allowing a guest VM to execute code on the host. Public details specify the issue affects VMware Workstation and Fusion, with IPv6 VMNAT mode not enabled by default. Affected ranges include:...

CVE-2017-4950

VMware Workstation and Fusion contain an integer overflow in the VMware NAT service when IPv6 mode is enabled, potentially causing an out-of-bounds read that can lead to host code execution with additional issues. IPv6 VMNAT mode is not enabled by default. Vendor advisories (VMSA-2018-0004/0005) ...

CVE-2018-6983

The CVE-2018-6983 issue affects VMware Workstation (14.x before 14.1.5; 15.x before 15.0.2) and VMware Fusion (10.x before 10.1.5; 11.x before 11.0.2). The vulnerability is an integer overflow in the virtual network devices, enabling a guest VM to execute code on the host. The root cause and exac...

CVE-2019-5535

CVE-2019-5535 is a network denial-of-service vulnerability in VMware Workstation and Fusion caused by improper handling of certain IPv6 packets. The issue affects Workstation 15.x and Fusion 11.x prior to the fixed versions. From the VMware advisory (VMSA-2019-0014): exploitation requires sending...

CVE-2021-21988

Affected products: VMware Workstation 16.x (pre-16.1.2) and Horizon Client for Windows 5.x (pre-5.5.2). Vulnerability details: Out-of-bounds read in the Cortado ThinPrint component (JPEG2000 and TTC parsers) that may allow information disclosure from the TPView process when a malicious actor has ...

CVE-2008-3692

CVE-2008-3692 is described as an unspecified vulnerability in a VMware ActiveX control affecting multiple VMware products: Workstation 5.5.x up to 5.5.8 (build 108000), Workstation 6.0.x up to 6.0.5 (build 109488), VMware Player 1.x up to 1.0.8 (108000), VMware Player 2.x up to 2.0.5 (109488), VM...

CVE-2009-0909

VMware CVE-2009-0909 is the VNnc Codec heap overflow in VMware Workstation 6.5.x before 6.5.2 (build 156735), VMware Player 2.5.x before 2.5.2 (build 156735), VMware ACE 2.5.x before 2.5.2 (build 156735), and VMware Server 2.0.x before 2.0.1 (build 156745). It allows remote code execution via a c...

CVE-2009-3732

CVE-2009-3732 is a VMware Remote Console (VMrc) format-string vulnerability in vmware-vmrc.exe build 158248 that allows remote code execution via a malicious page or URL. Exploitation requires luring the VMrc user to open a crafted page; code executes with the privileges of the logged-on user. Th...

CVE-2015-2337

CVE-2015-2337 affects VMware’s TPInt.dll (and related TPView.dll) memory handling. VMware Workstation 10.x before 10.0.6 and 11.x before 11.1.1; VMware Player 6.x before 6.0.6 and 7.x before 7.1.1; and VMware Horizon Client 3.2.x before 3.2.1, 3.3.x, and 5.x local-mode before 5.4.2 on Windows are...

CVE-2015-2338

This CVE set covers VMware’s TPView.dll memory allocation flaw that can cause host-denial-of-service from guest OS on Windows. Affected products and ranges include: VMware Workstation 10.x before 10.0.6 and 11.x before 11.1.1; VMware Player 6.x before 6.0.6 and 7.x before 7.1.1; VMware Horizon Cl...

CVE-2015-2339

CVE-2015-2339 affects VMware TPView.dll memory allocation in Windows-hosted VMware products. Affected: Workstation 10.x before 10.0.6, 11.x before 11.1.1; Player 6.x before 6.0.6, 7.x before 7.1.1; Horizon Client 3.2.x before 3.2.1, 3.3.x, and 5.x before 5.4.2. The flaw (memory allocation issue) ...

CVE-2017-4912

CVE-2017-4912 is one of multiple out-of-bounds read/write vulnerabilities in VMware TPView.dll’s JPEG2000/TrueType Font parsers that affect VMware Workstation (12.x before 12.5.3) and Horizon View Client (4.x before 4.4.0). The issue arises in the TPView.dll TTF/TFP parsing code and can lead to c...

CVE-2008-2098

The CVE-2008-2098 entry corresponds to a heap-based buffer overflow in VMware Host-Guest File System (HGFS) sharing. Affected products include VMware Workstation 6.x prior to 6.0.4 (build 93057), VMware Player 2.x prior to 2.0.4 (build 93057), VMware ACE 2.x prior to 2.0.2 (build 93057), and VMwa...

CVE-2008-3696

CVE-2008-3696 corresponds to an unspecified vulnerability in VMware ActiveX controls used by VMware Workstation/Player/ACE/Server (across multiple versions). The connected NVD entry notes a remote, network-exploitable issue with unknown impact, affecting VMware ActiveX components across Workstati...

CVE-2010-1140

VMware Workstation 7.0 (before 7.0.1, build 227600) and VMware Player 3.0 (before 3.0.1, build 227600) on Windows are affected by CVE-2010-1140 through their USB service. Local host users can escalate privileges by placing a Trojan horse on the host OS disk. Affected products and builds are confi...

CVE-2010-1141

CVE-2010-1141 affects VMware Tools and related VMware host components (Workstation, Player, ACE, Server, Fusion, ESXi/ESX). The flaw is improper access/loading of libraries, enabling a user-assisted remote attacker to trigger arbitrary code execution by convincing a Windows guest OS user to click...

CVE-2008-1362

CVE-2008-1362 affects VMware products (Workstation, Player, ACE, Server) on Windows. The vulnerability arises from insecurely created named pipes used by the authd process, allowing a local attacker to impersonate authd and gain privileges or cause a denial of service. Affected versions include V...

CVE-2008-1364

CVE-2008-1364 describes an unspecified vulnerability in the DHCP service across multiple VMware products (Workstation 5.5.x before 5.5.6, Player 1.0.x before 1.0.6, ACE 1.0.x before 1.0.5, Server 1.0.x before 1.0.5, Fusion 1.1.x before 1.1.1) that allows an attacker to cause a denial of service. ...

CVE-2008-4279

CVE-2008-4279 details two VMware 64-bit guest emulation flaws that allow an authenticated guest to escalate privileges by triggering an exception that causes the virtual CPU to jump to a non-canonical address. Affected products include Workstation 6.0.x before 6.0.5 (109488), Workstation 5.x befo...

CVE-2009-1564

CVE-2009-1564 involves a heap-based buffer overflow in the VMnc movie decoder (vmnc.dll) used by VMware Workstation, VMware Player and related components. The vulnerability allows remote attackers to execute arbitrary code by supplying a crafted AVI file with HexTile-encoded video chunks; affecte...

CVE-2008-3693

CVE-2008-3693 refers to an unspecified vulnerability in an ActiveX control used by multiple VMware products (VMware Workstation 5.5.x up to 5.5.8, Workstation 6.0.x up to 6.0.5, VMware Player 1.x up to 1.0.8, VMware Player 2.x up to 2.0.5, VMware ACE 1.x up to 1.0.7, VMware ACE 2.x up to 2.0.5, a...

CVE-2010-3277

Summary: CVE-2010-3277 affects VMware Workstation 7.x (before 7.1.2 build 301548) and VMware Player 3.x (before 3.1.2 build 301548). The installer can render an index.htm file present in the installation directory, potentially causing local users to trigger unintended interpretation of web script...

CVE-2005-4459

The CVE-2005-4459 issue is a heap-based buffer overflow in VMware’s NAT service components vmnat.exe and vmnet-natd across several products (Workstation 5.5, GSX Server 3.2, ACE 1.0.1, Player 1.0). The flaw is triggered by malformed FTP PORT and EPRT commands processed by the NAT service, allowin...

CVE-2007-5023

CVE-2007-5023 describes an unquoted Windows search path vulnerability that could allow local users to gain privileges in EMC VMware products. Affected are VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, VMware Player before 1.0.5 Build 56455 and Player 2 before 2.0.1...

CVE-2008-2099

CVE-2008-2099 is a VMware VMCI/HGFS code‑execution vulnerability affecting VMware Workstation 6.x (before 6.0.4 build 93057), VMware Player 2.x (before 2.0.4 build 93057), and VMware ACE 2.x (before 2.0.2 build 93057) on Windows. A guest OS user could potentially execute arbitrary code on the hos...

CVE-2010-4294

The CVE-2010-4294 issue affects the VMware VMnc frame-decompression codec used by VMware Movie Decoder and related VMware products (Workstation, Player, Server) on Windows. The vulnerability arises from improper validation of a size field in the VMnc frame decompression routine, enabling remote c...

CVE-2011-3868

CVE-2011-3868 affects VMware products: Workstation 7.x before 7.1.5, Player 3.x before 3.1.5, Fusion 3.1.x before 3.1.3, and VMware AMS. A crafted UDF filesystem in an ISO image can lead to remote code execution. Mitigation per the initial description is to update to the listed fixed versions (7....

CVE-2013-1662

CVE-2013-1662 affects VMware Workstation (8.x/9.x) and VMware Player (4.x/5.x) on Debian-based systems. A local attacker can escalate privileges to root by exploiting a crafted lsb_release binary in PATH via vmware-mount’s use of popen(3). The issue is rooted in how vmware-mount handles PATH and ...

CVE-2007-0061

The DHCP server in VMware products is affected: VMware Workstation (before 5.5.5.56455 and 6.x before 6.0.1.55017), VMware Player (before 1.0.5.56455 and Player 2 before 2.0.1.55017), ACE (before 1.0.3.54075 and ACE 2 before 2.0.1.55017), and VMware Server (before 1.0.4.56528) allows remote attac...

CVE-2007-1337

VMware Workstation 5.5.x before 5.5.4 is affected by CVE-2007-1337 where the VMX component fails to read ACPI sleep (S2) state correctly when returning to run state, enabling a DoS that can reboot the guest VM. Connected advisories also document related CVEs and patches; the primary fix is VMware...

CVE-2007-5617

CVE-2007-5617 concerns VMware Workstation/Player with an unspecified vulnerability in untrusted VM images that prevents launching. Affected products/versions: VMware Player 1.0.x before 1.0.5, 2.0 before 2.0.1; VMware Workstation 5.x before 5.5.5 and 6.x before 6.0.1. The impact is not detailed i...

CVE-2008-3698

CVE-2008-3698 is a local privilege-escalation in the host OS via VMware OpenProcess issue. Affected host components include VMware Workstation (5.x, 6.x), VMware Server, VMware Player (1.x/2.x), VMware ACE (1.x/2.x). Exploitation would allow local users to run arbitrary code with elevated host pr...

CVE-2011-2146

CVE-2011-2146 concerns the VMware Host Guest File System (HGFS) disclosure issue. The description specifies that mount.vmhgfs in VMware Workstation (7.1.x before 7.1.4), VMware Player (3.1.x before 3.1.4), VMware Fusion (3.1.x before 3.1.3), and VMware ESXi/ESX (versions 3.5–4.1) allows guest OS ...

CVE-2017-4910

CVE-2017-4910 refers to multiple out-of-bounds read vulnerabilities in the JPEG2000 parser (TPView.dll) affecting VMware Workstation 12.x (before 12.5.3) and Horizon View Client 4.x (before 4.4.0). The root cause is improper validation in TPView.dll leading to code execution or Denial of Service ...