Multiple vulnerabilities in VMware Workstation and Player

説明

Multiple vulnerabilities were found in VMware Workstation and Player. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code, cause denial of service.

Below is a complete list of vulnerabilities:

1. A out-of-bound read vulnerability in Shader Functionality can be exploited locally to cause denial of service.
2. A information leak vulnerability in the EHCI USB controller can be exploited locally to obtain sensitive information.
3. A heap overflow vulnerability in EHCI controller can be exploited locally to execute arbitrary code.
4. A use after free vulnerability in SVGA device can be exploited locally to execute arbitrary code.
5. A information leak vulnerability in the XHCI USB controller can be exploited locally to obtain sensitive information.
6. A out of bounds write vulnerability in xHCI controller can be exploited locally to cause denial of service or execute arbitrary code.
7. A heap overflow vulnerability in vmxnet3 can be exploited locally to obtain sensitive information.
8. A heap overflow vulnerability in SVGA device can be exploited locally to execute arbitrary code.
9. A use after free vulnerability in PVNVRAM can be exploited to obtain sensitive infromation.

オリジナルアドバイザリー

• VMSA-2020-0015

エクスプロイテーション

Public exploits exist for this vulnerability.

関連製品

• VMware-Workstation
• VMware-Player

CVEリスト

• CVE-2020-3970
  warning
• CVE-2020-3964
  warning
• CVE-2020-3966
  critical
• CVE-2020-3962
  critical
• CVE-2020-3965
  high
• CVE-2020-3968
  critical
• CVE-2020-3971
  high
• CVE-2020-3967
  critical
• CVE-2020-3969
  critical
• CVE-2020-3963
  high

も参照してください

お住まいの地域に広がる脆弱性の統計をご覧ください statistics.securelist.com