VMware Workstation and Fusion updates address an out-of-bounds write issue

Workstation and Fusion e1000 device out-of-bounds write vulnerability

VMware Workstation and Fusion contain an out-of-bounds write vulnerability in the e1000 device. This issue may allow a guest to execute code on the host.

VMware would like to thank Anonymous working with Trend Micro’s Zero Day Initiative for reporting this issue to us.

The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the identifier CVE-2018-6973 to this issue.

Column 5 of the following table lists the action required to remediate the vulnerability in each release, if a solution is available.