VMware Clipboard Multiple Information Disclosure Vulnerabilities

Bugtraq ID:	22413
Class:	Design Error
CVE:	CVE-2007-0833 CVE-2007-0832
Remote:	Yes
Local:	No
Published:	Feb 05 2007 12:00AM
Updated:	Jul 06 2016 02:40PM
Credit:	Eitan Caspi is credited with the discovery of these vulnerabilities.
Vulnerable:	VMWare VMWare 5.5.3 34685
Not Vulnerable:

VMware Clipboard Multiple Information Disclosure Vulnerabilities

VMware is prone to two information-disclosure vulnerabilities because of multiple design errors in the clipboard plugin.

An attacker can exploit these issues to obtain sensitive information that may lead to further attacks.

Version 5.5.3 build 34685 is vulnerable to these issues; other versions may also be affected.

Note that the clipboard plugin is an add-on feature that is not active by default.

VMware Clipboard Multiple Information Disclosure Vulnerabilities

An attacker can exploit these issues by gaining local interactive access to the affected computer.

VMware Clipboard Multiple Information Disclosure Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches for these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

VMware Clipboard Multiple Information Disclosure Vulnerabilities

References:

• VMware Homepage (VMware)
  
• Vmare workstation guest isolation weaknesses (clipboard transfer) ([email protected])