CVE-2009-1805

CVE-2009-1805 concerns the VMware Descheduled Time Accounting DoS vulnerability. The issue affects multiple VMware products where the Descheduled Time Accounting Service is not running inside a Windows guest, allowing a guest OS user to cause a denial of service via unknown vectors. Affected prod...

CVE-2005-4459

The CVE-2005-4459 issue is a heap-based buffer overflow in VMware’s NAT service components vmnat.exe and vmnet-natd across several products (Workstation 5.5, GSX Server 3.2, ACE 1.0.1, Player 1.0). The flaw is triggered by malformed FTP PORT and EPRT commands processed by the NAT service, allowin...

CVE-2009-1147

CVE-2009-1147 affects VMware VMCI (vmci.sys) and enables privilege escalation on Windows-based hosts/guests. The issue is described in VMware’s VMSA-2009-0005 advisory and is linked to VMCI IOCTL handling that can be abused by a local user with admin rights to gain SYSTEM privileges. A remediatio...

CVE-2005-0444

Concretely, CVE-2005-0444 affects VMware Workstation (as referenced in the CVE entry): VMware before 4.5.2.8848-r5 searches for gdk-pixbuf shared libraries in an untrusted, world-writable directory (notably /tmp/rrdharan), enabling a local attacker to load a malicious library and execute arbitrar...

CVE-2004-2515

Technical details for CVE-2004-2515 are not publicly available in the provided documents. The description notes a format-string vulnerability in VMware Workstation 4.5.2 but no specifics on affected components, root cause, or fixes are included here. Monitor for updates.