Multiple vulnerabilities in VMware

Описание

Multiple serious vulnerabilities have been found in VMware products. Malicious users can exploit these vulnerabilities to obtain sensitive information, hijack a session or cause denial of service. Below is a complete list of vulnerabilities

1. Improperly restrictions can be exploited remotely via a specially designed master key or TLS handshake;
2. Improper buffer management can be exploited remotely at a point related to alert conditions;
3. Race conditions can be exploited remotely via a specially designed environment;
4. Vectors related to the ECFH cipher can be exploited remotely via a specially designed certificate.

Первичный источник обнаружения

• VMware bulletin
  

Эксплуатация

Public exploits exist for this vulnerability.

Связанные продукты

• VMware-Workstation
• VMware-Player
• VMware-vSphere-Client
• VMware-Fusion
• VMware-Horizon-View-Client

Список CVE

• CVE-2014-0198
  warning
• CVE-2014-0224
  high
• CVE-2014-3470
  warning
• CVE-2010-5298
  warning

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com