CVE-2017-4913

CVE-2017-4913 is a TPView.dll TrueType Font parser integer overflow vulnerability affecting VMware Workstation 12.x before 12.5.3 and Horizon View Client 4.x before 4.4.0. The issue can allow a guest OS to execute arbitrary code or cause a Denial of Service on Windows hosts running Workstation or...

CVE-2017-4948

CVE-2017-4948 is an out-of-bounds read flaw in TPView.dll affecting VMware Workstation (14.x before 14.1.0 and 12.x) and Horizon View Client (4.x before 4.7.0). Exploitation is tied to scenarios where virtual printing is enabled, which is not by default in Workstation but is by default in Horizon...

CVE-2007-1069

CVE-2007-1069 affects VMware Workstation prior to 5.5.4. According to VMware advisory and related materials, memory management could mishandle general protection faults in Windows guests, enabling denial-of-service by crashing the Windows VM. The issue is among several DoS problems addressed in V...

CVE-2007-4497

CVE-2007-4497 is an unspecified vulnerability affecting VMware products (Workstation prior to 5.5.5 Build 56455, Player prior to 1.0.5 Build 56455, Player 2 prior to 2.0.1 Build 55017, ACE prior to 1.0.3 Build 54075, ACE 2 prior to 2.0.1 Build 55017, and Server prior to 1.0.4 Build 56528). It all...

CVE-2009-0910

CVE-2009-0910 involves a heap-based buffer overflow in the VNnc Codec used by VMware Workstation 6.5.x (before 6.5.2 build 156735), VMware Player 2.5.x (before 2.5.2 build 156735), VMware ACE 2.5.x (before 2.5.2 build 156735), and VMware Server 2.0.x (before 2.0.1 build 156745). The vulnerability...

CVE-2009-1147

CVE-2009-1147 affects VMware VMCI (vmci.sys) and enables privilege escalation on Windows-based hosts/guests. The issue is described in VMware’s VMSA-2009-0005 advisory and is linked to VMCI IOCTL handling that can be abused by a local user with admin rights to gain SYSTEM privileges. A remediatio...

CVE-2009-1565

VMware VMnc VMnc codec/VMware Movie Decoder (Windows) is affected by CVE-2009-1565. The issue arises from heap-based buffer overflows triggered by crafted HexTile-encoded video chunks in AVI files, enabling remote code execution. Affected products include VMware Movie Decoder before 6.5.4 Build 2...

CVE-2010-4296

CVE-2010-4296 affects VMware products including Workstation 7.x up to 7.1.2 (Linux), Player 3.1.x up to 3.1.2 (Linux), Server 2.0.2 (Linux), and Fusion 3.1.x up to 3.1.2. The issue is a library loading flaw in vmware-mount that lets local host users load arbitrary shared objects with root privile...

CVE-2017-4909

CVE-2017-4909 affects VMware Workstation 12.x (pre-12.5.3) and Horizon View Client 4.x (pre-4.4.0). The vulnerability is a heap buffer overflow in the TPView.dll TTF/ JPEG2000 parsing in Cortado ThinPrint, enabling guest-host code execution or Denial of Service on Windows hosts/guests. Exploitati...

CVE-2007-1876

CVE-2007-1876 affects VMware Workstation prior to 5.5.4. In a 64-bit Windows guest on a 64-bit host, debugging a local program and stepping into a syscall instruction could corrupt the virtual machine’s register context, leading to system instability or VM/process failures. The issue is described...

CVE-2011-1126

CVE-2011-1126 concerns VMware vmrun (used with VIX API 1.x on Linux and VMware Workstation 6.5.x/7.x) that is vulnerable to local privilege escalation via loading a malicious shared library from an insecure directory. The issue allows a local attacker to gain elevated privileges by exploiting lib...

CVE-2012-3288

CVE-2012-3288 affects multiple VMware hosted products via a vulnerability in handling Checkpoint files that may cause memory corruption, allowing arbitrary code execution on the host or a denial of service. Affected: Workstation 7.x (before 7.1.6), 8.x (before 8.0.4); Player 3.x (before 3.1.6), 4...

CVE-2015-1044

CVE-2015-1044 affects VMware products (Workstation 10.x before 10.0.5, Player 6.x before 6.0.5, ESXi 5.0–5.5) and is part of multiple vulnerabilities described in OpenVAS/Nessus entries. The explicit vulnerability in the VMware Authorization service (vmware-authd) allows a denial-of-service on th...

CVE-2015-2336

CVE-2015-2336 affects VMware products on Windows: TPView.dll/TPInt.dll memory allocation issues in VMware Workstation 10.x before 10.0.6 and 11.x before 11.1.1, VMware Player 6.x before 6.0.6 and 7.x before 7.1.1, and VMware Horizon Client 3.2.x before 3.2.1, 3.3.x, and 5.x local-mode before 5.4....

CVE-2019-5511

CVE-2019-5511 affects VMware Workstation on Windows (VMware Workstation Pro < 14.1.6, Player < 14.1.6; Pro < 15.0.3, Player

CVE-2007-4059

CVE-2007-4059 is an absolute path traversal in IntraProcessLogging.dll (Windows) affecting VMware Workstation/Server/Player components. The vulnerability allows a remote attacker to overwrite arbitrary files by supplying a full pathname to the SetLogFileName function in IntraProcessLogging.dll (a...

CVE-2008-3892

CVE-2008-3892 is a buffer overflow in a VMware COM API ActiveX control (GuestInfo method) that can be triggered by passing a long string argument; vulnerable in VMware Workstation 5.5.x up to 5.5.8, Workstation 6.0.x up to 6.0.5, VMware Player 1.x up to 1.0.8, VMware Player 2.x up to 2.0.5, VMwar...

CVE-2018-5511

CVE-2018-5511 affects F5 BIG-IP TMUI (BIG-IP Configuration utility). When authenticated administrative users execute commands, command restrictions may not be enforced, enabling privilege escalation. Affected versions include BIG-IP 13.1.0–13.1.0.3 and 13.0.0; a fix was introduced in 13.1.0.4 (an...

CVE-2007-1877

CVE-2007-1877 affects VMware Workstation and related VMware products prior to 5.5.4. The issue is a Denial‑of‑Service caused by the VMX process storing malformed configuration data, due to improper handling of configuration information. VMware’s advisory (VMSA-2007-0004) documents affected releas...

CVE-2007-4496

The CVE-2007-4496 issue affects VMware products: VMware Workstation (before 5.5.5.56455), VMware Player (before 1.0.5.56455 and Player 2 before 2.0.1 55017), ACE (before 1.0.3.54075 and ACE 2 before 2.0.1 55017), and VMware Server (before 1.0.4 56528). It allows an authenticated guest OS user wit...

CVE-2008-1363

VMware product family on Windows (Workstation 6.0.x < 6.0.3, Workstation 5.5.x < 5.5.6, Player 2.0.x < 2.0.3, Player 1.0.x < 1.0.6, ACE 2.0.x < 2.0.1 and 1.0.x < 1.0.5, Server 1.0.x

CVE-2009-0199

CVE-2009-0199 refers to a heap-based buffer overflow in the VMnc media codec (vmnc.dll) used by VMware Movie Decoder and related VMware products on Windows. The vulnerability can be triggered by a video file with crafted framebuffer dimensions, allowing remote code execution. Affected components ...

CVE-2010-1138

CVE-2010-1138 corresponds to an information-disclosure vulnerability in VMware hosted products where a guest can cause the host vmware-vmx memory to be exposed via the virtual networking stack when processing network packets. Affected products include VMware Workstation/Player/ACE/Server/Fusion a...

CVE-2016-2077

CVE-2016-2077 affects VMware Workstation 11.x (pre-11.1.3) and VMware Player 7.x (pre-7.1.3) on Windows. The vulnerability arises from incorrect access to an executable file, enabling local host-OS privilege escalation through unspecified vectors. Impact: host privileges; Victims may be able to e...

CVE-2017-4934

CVE-2017-4934 affects VMware Workstation 12.x (pre-12.5.8) and VMware Fusion 8.x (pre-8.5.9), with a heap buffer‑overflow in the VMNAT device that may allow a guest to execute code on the host. The issue is local: an attacker on the guest can trigger code execution in the host context. Related ad...

CVE-2017-4935

CVE-2017-4935 affects VMware Workstation 12.x prior to 12.5.8 and Horizon View Client for Windows 4.x prior to 4.6.1. The vulnerability is an out-of-bounds write in the JPEG2000 parser within TPView.dll that can allow a guest operating on the host to execute code or cause a Denial of Service on t...

CVE-2017-4938

CVE-2017-4938 is a guest RPC NULL pointer dereference vulnerability in VMware Workstation 12.x before 12.5.8 and VMware Fusion 8.x before 8.5.9 that can crash VMs when exploited with normal user privileges. VMware issued VMSA-2017-0018 and updates; remediation is to upgrade to Workstation 12.5.8 ...

CVE-2007-4591

CVE-2007-4591 concerns a local denial of service (host OS crash) and potential privilege escalation in VMware Workstation 6.0. The issue is tied to the driver vstor-ws60.sys; by sending a small file buffer size value to the FsSetVolumeInformation IOCTL handler with an FsSetFileInformation subcode...

CVE-2012-2449

CVE-2012-2449 describes an out-of-bounds memory write in the virtual floppy device configuration that could crash the VMX process or allow code execution on the host, given administrative guest privileges. Affected VMware products include Workstation 8.x (pre-8.0.3), Player 4.x (pre-4.0.3), Fusio...

CVE-2012-2450

CVE-2012-2450 covers VMware products (Workstation 8.x before 8.0.3, Player 4.x before 4.0.3, Fusion 4.x before 4.1.2, ESXi/ESX 3.5–5.0) with an improper handling/registration of SCSI devices. The flaw enables an untrusted guest user with admin privileges to trigger an out‑of‑bounds memory write, ...

CVE-2017-4911

CVE-2017-4911 and related CVEs describe multiple out-of-bounds write/read vulnerabilities affecting VMware Workstation 12.x (pre-12.5.3) and Horizon View Client 4.x (pre-4.4.0) in the JPEG2000/TPView.dll parser, and (for some) TrueType Font handling. The root cause is improper validation inside t...

CVE-2017-4936

CVE-2017-4936 is an out-of-bounds read vulnerability in the JPEG2000 parser (TPView.dll) affecting VMware Workstation 12.x before 12.5.8 and Horizon View Client for Windows 4.x before 4.6.1. The issue may allow a guest to execute code or cause a Denial of Service on the host or View desktop. VMwa...

CVE-2003-0631

CVE-2003-0631 affects VMware GSX Server 2.5.1 build 4968 and earlier, and Workstation 4.0 and earlier. The root cause is the use of certain environment variables when launching a virtual machine session, allowing a local user to gain root privileges. The provided documents do not specify a patch,...

CVE-2007-0833

CVE-2007-0833 affects VMware Workstation 5.5.3 build 34685. When the guest-to-host copy/paste option is enabled, clipboard data may be preserved on the guest after deletion on the host, potentially allowing local attackers to read clipboard contents by returning focus to the host. The connected s...

CVE-2009-2628

The CVE-2009-2628 issue affects VMware VMnc codec (vmnc.dll) used by VMware Movie Decoder and related products. The root cause is heap memory corruption triggered by AVI files with certain small heights, enabling remote code execution on Windows when processed by vulnerable VMnc-based components ...

CVE-2021-21989

CVE-2021-21989 affects VMware Workstation 16.x (pre-16.1.2) and Horizon Client for Windows 5.x (pre-5.5.2). The issue is an out-of-bounds read in the Cortado ThinPrint TTC Parser that can lead to information disclosure from the TPView process when an attacker has access to a virtual machine or re...

CVE-2005-0444

Concretely, CVE-2005-0444 affects VMware Workstation (as referenced in the CVE entry): VMware before 4.5.2.8848-r5 searches for gdk-pixbuf shared libraries in an untrusted, world-writable directory (notably /tmp/rrdharan), enabling a local attacker to load a malicious library and execute arbitrar...

CVE-2006-6410

The CVE-2006-6410 entry describes a buffer overflow in an ActiveX control in VMware 5.5.1 that allows local users to execute arbitrary code by passing a long VmdbDb parameter to the Initialize function. The NVD entry corroborates this description and lists a CVSSv2 base score of 4.6 (Medium) with...

CVE-2007-2491

CVE-2007-2491 concerns the PIIX4 power management subsystem in VMware Workstation 5.5.3.34685 and VMware Server 1.0.1.29996. A crafted poke to I/O port 0x1004 lets a local user write to arbitrary memory, enabling a Denial of Service (virtual machine crash) or other unspecified impact. The issue i...

CVE-2007-5618

CVE-2007-5618 refers to an unquoted Windows search path vulnerability in VMware products (Workstation, Player, Server, ACE) prior to specified fixed versions. The issue allows local users to gain privileges by exploiting improperly quoted paths in Authorization and other services. Affected ranges...

CVE-2009-1146

Affected software: VMware Workstation 6.5.1 and earlier, VMware Player 2.5.1 and earlier, VMware ACE 2.5.1 and earlier, and VMware Server 1.0.x before 1.0.9 build 156507 and 2.0.x before 2.0.1 build 156745. Vulnerability: An unspecified DoS issue exists in the ioctl handling of hcmon.sys, enablin...

CVE-2012-5459

CVE-2012-5459; VMware Workstation 8.x (<8.0.5) and VMware Player 4.x (

CVE-2001-1059

VMware creates a temporary file vmware-log.USERNAME with insecure permissions, enabling local users to read or modify license information. This CVE (CVE-2001-1059) is rated Low (CVSSv2 base 3.6) with local attack vector and no remote access. The connected documents reiterate the same issue but pr...

CVE-2006-3589

The CVE-2006-3589 issue affects VMware products on Linux: VMware Player/Workstation/Server for Linux, VMware ESX Server 2.x, and VMware Infrastructure 3. vmware-config.pl does not check the return code of Perl chmod, and lacks using safe_chmod, which can leave SSL key files with an unsafe umask a...

CVE-2019-5098

CVE-2019-5098 is an exploitable out-of-bounds read in the AMD ATI Radeon ATIDXX64.DLL shader path (version 26.20.13001.29010). A malformed pixel shader within a VMware guest can trigger an out-of-bounds memory read, potentially impacting the VM host process (vmware-vmx.exe). Technical details fro...

CVE-1999-0733

CVE-1999-0733 is a buffer overflow in VMware 1.0.1 for Linux triggered by a long HOME environment variable. The vulnerability, described in multiple sources (NVD entry and Red Hat advisory), affects the VMware 1.0.1 Linux build and is characterized by a LOCAL attack vector with LOW complexity and...

CVE-2007-0832

The CVE-2007-0832 vulnerability affects VMware Workstation 5.5.3 build 34685, where the shared clipboard state is not updated promptly when the Enable copy and paste to and from this virtual machine checkbox is toggled. This lag in availability facilitates weaker host-guest isolation and could ...

CVE-2007-1056

VMware Workstation 5.5.3 build 34685 exposes a local-privilege risk: there are no per-user restrictions for certain privileged actions outside the guest OS. Local users can perform operations such as changing system time, accessing hardware components, and stopping the VMware Tools service by exp...

CVE-2017-4908

Summary: CVE-2017-4908 affects VMware Workstation 12.x (pre-12.5.3) and Horizon View Client 4.x (pre-4.4.0) due to multiple heap buffer-overflow flaws in the JPEG2000/TFF TPView.dll parser. Exploitation is local and requires virtual printing to be enabled (default on Horizon View; not on Workstat...

CVE-2012-3289

Summary: CVE-2012-3289 (VMware) is disclosed across multiple VMware products. The vulnerability allows remote attackers to cause a denial of service by crafting traffic from remote virtual devices, potentially crashing guest VMs. Affected products (per sources): VMware Workstation 8.x prior to 8....