VMware Player and Workstation 'vmware-authd' Multiple Remote Denial of Service Vulnerabilities
BID:33095
Info
VMware Player and Workstation 'vmware-authd' Multiple Remote Denial of Service Vulnerabilities
| Bugtraq ID: | 33095 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2009-0177 |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 03 2009 12:00AM |
| Updated: | Jan 23 2009 05:52PM |
| Credit: | laurent gaffie |
| Vulnerable: |
VMWare Workstation 5.5.4 VMWare Player 2.5.1 |
| Not Vulnerable: | |
Discussion
VMware Player and Workstation 'vmware-authd' Multiple Remote Denial of Service Vulnerabilities
VMware Player and Workstation are is prone to multiple remote denial-of-service vulnerabilities because the applications fail to perform adequate boundary checks on user-supplied input.
An attacker can exploit these issues to crash the affected applications, denying service to legitimate users. Given the nature of these issues, attackers may also be able to run arbitrary code, but this has not been confirmed.
VMware Player and Workstation are is prone to multiple remote denial-of-service vulnerabilities because the applications fail to perform adequate boundary checks on user-supplied input.
An attacker can exploit these issues to crash the affected applications, denying service to legitimate users. Given the nature of these issues, attackers may also be able to run arbitrary code, but this has not been confirmed.
Exploit / POC
VMware Player and Workstation 'vmware-authd' Multiple Remote Denial of Service Vulnerabilities
The following exploit code is available:
The following exploit code is available:
Solution / Fix
VMware Player and Workstation 'vmware-authd' Multiple Remote Denial of Service Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches for these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches for these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
VMware Player and Workstation 'vmware-authd' Multiple Remote Denial of Service Vulnerabilities
References:
References:
- VMware Homepage (VMware)