CVE-2012-5458

Summary (CVE-2012-5458) VMware Workstation 8.x (pre-8.0.5) and VMware Player 4.x (pre-4.0.5) on Windows are affected by a flaw where certain created host process threads have weak permissions. This weak permission set can allow a local attacker with access to the host OS to escalate privileges on...

CVE-2024-22269

CVE-2024-22269 describes an information-disclosure vulnerability in the vbluetooth device affecting VMware Workstation and Fusion. According to the provided documents, a malicious actor with local administrative privileges inside a virtual machine may read privileged information stored in hypervi...

CVE-2008-3695

CVE-2008-3695 is grouped with other VMware ActiveX control issues (CVE-2008-3691 to CVE-2008-3696). The connected documents describe an unspecified vulnerability in VMware ActiveX controls across multiple products (Workstation, Player, ACE, Server) with unknown impact and remote attack vectors; n...

CVE-2017-4937

CVE-2017-4937 refers to an out-of-bounds read vulnerability in the JPEG2000 parser (TPView.dll) affecting VMware Workstation 12.x prior to 12.5.8 and Horizon View Client for Windows 4.x prior to 4.6.1. Exploitation can lead to code execution or Denial of Service on the host OS in scenarios where ...

CVE-2017-4939

CVE-2017-4939 is a DLL hijacking vulnerability in the VMware Workstation installer for 12.x, prior to 12.5.8. The issue arises from improper DLL loading, enabling an attacker to load a DLL of their choosing and potentially execute arbitrary code. Connected advisories also detail related issues (e...

CVE-2003-0739

CVE-2003-0739 affects VMware Workstation 4.0.1 for Linux (build 5289 and earlier). The issue allows local users to delete arbitrary files via a symlink attack. Impact is described as PARTIAL for confidentiality, integrity, and availability, with local access and no authentication required. The ro...

CVE-2013-5972

CVE-2013-5972 affects VMware Workstation on Linux (9.x prior to 9.0.3) and VMware Player on Linux (5.x prior to 5.0.3). The root cause is improper handling of shared libraries, enabling a local attacker with access to the host OS to escalate privileges on the host via unspecified vectors. The iss...

CVE-2004-2515

Technical details for CVE-2004-2515 are not publicly available in the provided documents. The description notes a format-string vulnerability in VMware Workstation 4.5.2 but no specifics on affected components, root cause, or fixes are included here. Monitor for updates.

CVE-2007-4593

CVE-2007-4593 refers to an unspecified vulnerability in vstor2-ws60.sys used by VMware Workstation 6.0 , enabling local users to cause a host OS denial of service. The related CVE-2007-4591 provides explicit detail: a DoS/privilege escalation possibility by sending a small file buffer size to the...

CVE-2000-0090

CVE-2000-0090 affects VMware 1.1.2 and describes a local denial-of-service condition caused by a symlink attack. The provided documents confirm the vulnerability and its local access vector, but do not provide exploitation details beyond the basic description, nor any remediation or patch informa...

CVE-2005-2939

VMware Workstation 5.0.0 build-13124 is affected by an unquoted Windows search path vulnerability that could let a local user gain privileges by placing a malicious C:\program.exe. Root cause: unquoted path in Windows search. Impact: local privilege escalation (consistency with CVSS 2.0 metrics)....

CVE-2003-0480

CVE-2003-0480 affects VMware Workstation 4.0 for Linux. The vulnerability allows a local user to overwrite arbitrary files and escalate privileges through symlink manipulation. Root cause: symlink manipulation enabling file overwrite and privilege gain. Documents do not provide exploit details or...

CVE-2014-2384

The CVE affects VMware Workstation 10.0.1 (build 1379776) and VMware Player 6.0.1 (build 1379776) on Windows, where vmx86.sys (32/64-bit kernel driver) mishandles an IOCTL input buffer, causing a read access violation and potential denial of service (host crash). The root cause is an invalid/unch...