Multiple vulnerabilities in VMware vSphere Client

Description

Multiple critical vulnerabilities have been found in VMware vSphere. Malicious users can exploit these vulnerabilities to execute arbitrary code or bypass security. Below is a complete list of vulnerabilities

1. An improper client file update validation can be exploited remotely;
2. An improper X.509 certificates validation can be exploited remotely via SSL service spoofing;

Original advisories

• VMware bulletin

Related products

• VMware-vSphere-Client

CVE list

• CVE-2014-1210
  high
• CVE-2014-1209
  critical

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com