VMware Player Malformed VMX File Denial of Service Vulnerability

Bugtraq ID:	18515
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Jun 19 2006 12:00AM
Updated:	Jun 20 2006 05:50PM
Credit:	Discovered by n00b.
Vulnerable:	VMWare Player 1.0.1 Build 19317 VMWare Player
Not Vulnerable:

VMware Player Malformed VMX File Denial of Service Vulnerability

VMware Player is susceptible to a denial-of-service vulnerability. This issue is due to the application's failure to properly handle excessively long data.

This issue allows remote attackers to cause affected applications to crash, denying service to legitimate users. This occurs when unsuspecting users try to open malformed VMX files.

VMware Player is vulnerable to this issue. Due to code reuse among VMware products, other applications are also potentially affected as well.

VMware Player Malformed VMX File Denial of Service Vulnerability

The following VMX file is sufficient to demonstrate this issue:

• /data/vulnerabilities/exploits/dos.vmx

VMware Player Malformed VMX File Denial of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]:[email protected].

VMware Player Malformed VMX File Denial of Service Vulnerability

References:

• VMware Homepage (VMware)
  
• VMware Player Product Page (VMware)