Multiple vulnerabilities in VMware Workstation and Fusion

Popis

Multiple serious vulnerabilities have been found in VMware Workstation and Fusion. Malicious users can exploit these vulnerabilities to obtain sensitive information, gain privileges and cause denial of service.

Below is a complete list of vulnerabilities:

1. A speculative store bypass vulnerability can be exploited locally to obtain sensitive information;
2. A signature bypass vulnerability can be exploited locally to gain privileges;
3. Multiple NULL pointer dereference vulnerabilities in the RPC handler can be exploited locally to cause denial of service.

---

Technical details

Vulnerability (2) affects only VMware Fusion.

Oficiální doporučení

• VMSA-2018-0013

• VMSA-2018-0012

Vykořisťování

Public exploits exist for this vulnerability.

Související produkty

• VMware-Workstation
• VMware-Fusion

seznam CVE

• CVE-2018-6962
  critical
• CVE-2018-6963
  high
• CVE-2018-3639
  high

Zobrazit více

Zjistěte statistiky zranitelností šířících se ve vaší oblasti statistics.securelist.com