Multiple vulnerabilities in VMware Workstation and Fusion

Описание

Multiple serious vulnerabilities have been found in VMware Workstation and Fusion. Malicious users can exploit these vulnerabilities to obtain sensitive information, gain privileges and cause denial of service.

Below is a complete list of vulnerabilities:

1. A speculative store bypass vulnerability can be exploited locally to obtain sensitive information;
2. A signature bypass vulnerability can be exploited locally to gain privileges;
3. Multiple NULL pointer dereference vulnerabilities in the RPC handler can be exploited locally to cause denial of service.

---

Technical details

Vulnerability (2) affects only VMware Fusion.

Первичный источник обнаружения

• VMSA-2018-0013
  VMSA-2018-0012
  

Эксплуатация

Public exploits exist for this vulnerability.

Связанные продукты

• VMware-Workstation
• VMware-Fusion

Список CVE

• CVE-2018-6962
  high
• CVE-2018-6963
  warning
• CVE-2018-3639
  warning

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com