New User, Welcome!     Login

VMware Fusion

VMSA-2009-0013 VMware Fusion resolves two security issues

- ------------------------------------------------------------------------
                   VMware Security Advisory

Advisory ID:       VMSA-2009-0013
Synopsis:          VMware Fusion resolves two security issues
Issue date:        2009-10-01
Updated on:        2009-10-01 (initial release of advisory)
CVE numbers:       CVE-2009-3281 CVE-2009-3282
- ------------------------------------------------------------------------


VMSA-2010-0007 VMware hosted products, vCenter Server and ESX patches resolve multiple security issues

   VMware Player 3.0,
   VMware Player 2.5.3 and earlier,
   VMware ACE 2.6,
   VMware ACE 2.5.3 and earlier,
   VMware Server 2.0.2 and earlier,
   VMware Fusion 3.0,
   VMware Fusion 2.0.6 and earlier,
   VMware VIX API for Windows 1.6.x,

   VMware ESXi 4.0 before patch ESXi400-201002402-BG


VMSA-2010-0007 VMware hosted products, vCenter Server and ESX patches resolve multiple security issues

   VMware Player 3.0,
   VMware Player 2.5.3 and earlier,
   VMware ACE 2.6,
   VMware ACE 2.5.3 and earlier,
   VMware Server 2.0.2 and earlier,
   VMware Fusion 3.0,
   VMware Fusion 2.0.6 and earlier,
   VMware VIX API for Windows 1.6.x,

   VMware ESXi 4.0 before patch ESXi400-201002402-BG


VMSA-2009-0015 VMware hosted products and ESX patches resolve two security issues

   VMware Workstation 6.5.2 and earlier,
   VMware Player 2.5.2 and earlier,
   VMware ACE 2.5.2 and earlier,
   VMware Server 2.0.1 and earlier,
   VMware Server 1.0.9 and earlier,
   VMware Fusion 2.0.5 and earlier,

   VMware ESXi 4.0 without patch ESXi400-200909401-BG,

   VMware ESXi 3.5 without patches ESXe350-200910401-I-SG,
                                   ESXe350-200901401-I-SG,

VMSA-2010-0018 VMware hosted products and ESX patches resolve multiple security issues

   VMware Workstation 7.1.1 and earlier,
   VMware Workstation 6.5.4 and earlier,
   VMware Player 3.1.1 and earlier,
   VMware Player 2.5.4 and earlier,

   VMware Fusion 3.1.1 and earlier,

   ESXi 4.1 without patch ESXi410-201010402-BG or later
   ESXi 4.0 without patch ESXi400-201009402-BG or later
   ESXi 3.5 without patch ESXe350-201008402-T-BG or later


VMSA-2009-0007 VMware Hosted products and ESX and ESXi patches resolve security issues

   VMware Workstation 6.5.1 and earlier,
   VMware Player 2.5.1 and earlier,
   VMware ACE 2.5.1 and earlier,
   VMware Server 2.0,
   VMware Server 1.0.8 and earlier,
   VMware Fusion 2.0.1 and earlier.

   VMware ESXi 3.5 without patch ESXe350-200904402-T-BG

   VMware ESX 3.5 without patch ESX350-200904401-BG


VMSA-2008-0009 Updates to VMware Workstation, VMware Player, VMware ACE, VMware Fusion, VMware Server, VMware VIX API, VMware ESX, VMware ESXi resolve critical security issues

- -------------------------------------------------------------------
                   VMware Security Advisory

Advisory ID:       VMSA-2008-0009
Synopsis:          Updates to VMware Workstation, VMware Player,
                   VMware ACE, VMware Fusion, VMware Server, VMware
                   VIX API, VMware ESX, VMware ESXi resolve critical
                   security issues
Issue date:        2008-06-04
Updated on:        2008-06-04 (initial release of advisory)
CVE numbers:       CVE-2007-5671 CVE-2008-0967 CVE-2008-2097

VMSA-2008-0005 Updated VMware Workstation, VMware Player, VMware Server, VMware ACE, and VMware Fusion resolve critical security issues

- -------------------------------------------------------------------
~                   VMware Security Advisory

Advisory ID:       VMSA-2008-0005
Synopsis:          Updated VMware Workstation, VMware Player, VMware
~                   Server, VMware ACE, and VMware Fusion resolve
~                   critical security issues
Issue date:        2008-03-17
Updated on:        2008-03-17 (initial release of advisory)
CVE numbers:       CVE-2008-0923 CVE-2008-0923 CVE-2008-1361
~                   CVE-2008-1362 CVE-2007-5269 CVE-2006-2940

VMSA-2011-0011 VMware hosted products address remote code execution vulnerability

   VMware Workstation 7.1.4 and earlier

   VMware Player 3.1.4 and earlier

   VMware Fusion 3.1.2 and earlier


3. Problem Description

 a. UDF file system import remote code execution

VMSA-2008-0008 Updates to VMware Workstation, VMware Player, VMware ACE, VMware Fusion resolve critical security issues

- -------------------------------------------------------------------
                   VMware Security Advisory

Advisory ID:       VMSA-2008-0008
Synopsis:          Updates to VMware Workstation, VMware Player,
                   VMware ACE, VMware Fusion resolve critical
                   security issues
Issue date:        2008-05-30
Updated on:        2008-05-30 (initial release of advisory)
CVE numbers:       CVE-2008-2098 CVE-2008-2099
- -------------------------------------------------------------------

VMSA-2009-0006 VMware Hosted products and patches for ESX and ESXi resolve a critical security vulnerability

   VMware Workstation 6.5.1 and earlier,
   VMware Player 2.5.1 and earlier,
   VMware ACE 2.5.1 and earlier,
   VMware Server 2.0,
   VMware Server 1.0.8 and earlier,
   VMware Fusion 2.0.3 and earlier,

   VMware ESXi 3.5 without patch ESXe350-200904201-O-SG,
 
   VMware ESX 3.5 without patch ESX350-200904201-SG,


Invalid #PF Exception Code in VMware can result in Guest Privilege Escalation

- VMware Workstation
- VMware Player
- VMware ACE
- VMware Server
- VMware ESX
- VMware Fusion
- Etc.

--------------------
Consequences
-----------------------



Copyright © 1995-2012 LinuxRocket.net. All rights reserved.

Nearly all of LinuxRocket's features are free. Be kind and donate to the cause!