VMware Hosted Products UDF File Systems Buffer Overflow Vulnerability
BID:49942
Info
VMware Hosted Products UDF File Systems Buffer Overflow Vulnerability
| Bugtraq ID: | 49942 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2011-3868 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 04 2011 12:00AM |
| Updated: | Oct 01 2012 07:10PM |
| Credit: | Anonymous researcher working with the SecuriTeam Secure Disclosure program |
| Vulnerable: |
VMWare Workstation 7.1.4 VMWare Workstation 7.1.3 VMWare Workstation 7.1.1 VMWare Workstation 7.0.1 VMWare Workstation 7.1.2 VMWare Workstation 7.1 VMWare Workstation 7.0 VMWare Player 3.1.4 VMWare Player 3.1.3 VMWare Player 3.1.2 VMWare Player 3.1 VMWare Player 3.1.2 VMWare Player 3.1.1 VMWare Player 3.1 VMWare Player 3.0.1 VMWare Player 3.0 VMWare Fusion 3.1 VMWare Fusion 3.1.2 VMWare Fusion 3.1.1 VMWare Fusion 3.1 VMWare Fusion 3.0 Gentoo Linux |
| Not Vulnerable: |
VMWare Workstation 7.1.5 VMWare Player 3.1.5 VMWare Fusion 3.1.3 |
Discussion
VMware Hosted Products UDF File Systems Buffer Overflow Vulnerability
Multiple VMware products are prone to a buffer-overflow vulnerability.
An attacker can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition.
The following products are affected:
VMware Workstation 7.1.4 and earlier
VMware Player 3.1.4 and earlier
VMware Fusion 3.1.2 and earlier
Multiple VMware products are prone to a buffer-overflow vulnerability.
An attacker can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition.
The following products are affected:
VMware Workstation 7.1.4 and earlier
VMware Player 3.1.4 and earlier
VMware Fusion 3.1.2 and earlier
Exploit / POC
VMware Hosted Products UDF File Systems Buffer Overflow Vulnerability
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
VMware Hosted Products UDF File Systems Buffer Overflow Vulnerability
Solution:
The vendor has released an advisory and updates. Please see the references for more information.
Solution:
The vendor has released an advisory and updates. Please see the references for more information.