Multiple vulnerabilities in VMware Workstation and Fusion

Описание

Multiple vulnerabilities were found in VMware Workstation and Fusion. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code and cause denial of service.

Below is a complete list of vulnerabilities:

1. Security vulnerability in VMware Fusion can be exploited to bypass security restrictions;
2. Out-of-bounds write vulnerability in VMware Workstation and Fusion can be exploited to cause denial of service and potentially execute arbitrary code;
3. Out-of-bounds read/write vulnerability in VMware Workstation and Fusion can be exploited to execute arbitrary code;
4. Time-of-check Time-of-use (TOCTOU) vulnerability in VMware Workstation and Fusion can be exploited to execute arbitrary code;
5. Out-of-bounds write vulnerability in VMware Workstation and Fusion can be exploited to execute arbitrary code;

Первичный источник обнаружения

• VMSA-2019-0005
  

Связанные продукты

• VMware-Workstation
• VMware-Fusion

Список CVE

• CVE-2019-5514
  high
• CVE-2019-5515
  critical
• CVE-2019-5518
  high
• CVE-2019-5519
  high
• CVE-2019-5524
  critical

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com