Arbitrary code execution and denial of service vulnerability in VMware products

Beschreibung

An unspecified vulnerability was found in VMware Workstation Pro 12.x before 12.5.2, VMware Workstation Player 12.x before 12.5.2 and VMware Fusion, Fusion Pro 8.x before 8.5.2. By exploiting this vulnerability malicious users can execute arbitrary code on the host OS or cause a denial of service. This vulnerability can be exploited remotely via unspecified vectors.

---

Technical details

This vulnerability was found in the drag-and-drop (DnD) function.

Ursprüngliche Informationshinweise

• VMSA-2016-0019

CVE Liste

• CVE-2016-7461
  high

Mehr erfahren

Informieren Sie sich über die Statistiken der in Ihrer Region verbreiteten Sicherheitslücken statistics.securelist.com