cve.bz

vmware workstation vulnerabilities, newest first, page 5

Filter
  1. –CVE-2006-6410EPSS 1.4%

    Buffer overflow in an ActiveX control in VMWare 5.5.1 allows local users to execute arbitrary code via a long VmdbDb parameter to the Initialize function.

  2. –CVE-2006-3589EPSS 0.4%

    vmware-config.pl in VMware for Linux, ESX Server 2.x, and Infrastructure 3 does not check the return code from a Perl chmod function call, which might cause an SSL key file to be created with an unsafe umask that allows local users to read…

  3. –CVE-2005-4459EPSS 14%

    Heap-based buffer overflow in the NAT networking components vmnat.exe and vmnet-natd in VMWare Workstation 5.5, GSX Server 3.2, ACE 1.0.1, and Player 1.0 allows remote authenticated attackers, including guests, to execute arbitrary code vi…

  4. –CVE-2005-2939EPSS 0.3%

    Unquoted Windows search path vulnerability in VMWare Workstation 5.0.0 build-13124 might allow local users to gain privileges via a malicious "program.exe" file in the C: folder.

  5. –CVE-2005-0444EPSS 0.4%

    VMware before 4.5.2.8848-r5 searches for gdk-pixbuf shared libraries using a path that includes the rrdharan world-writable temporary directory, which allows local users to execute arbitrary code.

  6. –CVE-2004-2515EPSS 0.5%

    Format string vulnerability in VMware Workstation 4.5.2 build-8848, if running with elevated privileges, might allow local users to execute arbitrary code via format string specifiers in command line arguments. NOTE: it is not clear if the…

  7. –CVE-2003-0739EPSS 0.4%

    VMware Workstation 4.0.1 for Linux, build 5289 and earlier, allows local users to delete arbitrary files via a symlink attack.

  8. –CVE-2003-0631EPSS 0.4%

    VMware GSX Server 2.5.1 build 4968 and earlier, and Workstation 4.0 and earlier, allows local users to gain root privileges via certain enivronment variables that are used when launching a virtual machine session.

  9. –CVE-2003-0480EPSS 0.3%

    VMware Workstation 4.0 for Linux allows local users to overwrite arbitrary files and gain privileges via "symlink manipulation."

  10. –CVE-2001-1059EPSS 0.4%

    VMWare creates a temporary file vmware-log.USERNAME with insecure permissions, which allows local users to read or modify license information.

  11. –CVE-2000-0090EPSS 0.3%

    VMWare 1.1.2 allows local users to cause a denial of service via a symlink attack.

  12. –CVE-1999-0733EPSS 1.1%

    Buffer overflow in VMWare 1.0.1 for Linux via a long HOME environmental variable.