Multiple vulnerabilities in VMware

Beschreibung

Multiple serious vulnerabilities have been found in VMware products. Malicious users can exploit these vulnerabilities to obtain sensitive information, hijack a session or cause denial of service. Below is a complete list of vulnerabilities

1. Improperly restrictions can be exploited remotely via a specially designed master key or TLS handshake;
2. Improper buffer management can be exploited remotely at a point related to alert conditions;
3. Race conditions can be exploited remotely via a specially designed environment;
4. Vectors related to the ECFH cipher can be exploited remotely via a specially designed certificate.

Ursprüngliche Informationshinweise

• VMware bulletin

CVE Liste

• CVE-2014-0198
  high
• CVE-2014-0224
  high
• CVE-2014-3470
  high
• CVE-2010-5298
  high

Mehr erfahren

Informieren Sie sich über die Statistiken der in Ihrer Region verbreiteten Sicherheitslücken statistics.securelist.com