>
> TITLE:
> VMware Workstation Multiple Vulnerabilities
>
> SECUNIA ADVISORY ID:
> SA25079
>
> VERIFY ADVISORY:
>
>
> CRITICAL:
> Moderately critical
>
> IMPACT:
> Security Bypass, DoS
>
> WHERE:
> Local system
>
> SOFTWARE:
> VMware Workstation 5.x
>
>
> DESCRIPTION:
> Some vulnerabilities have been reported in VMware Workstation, which
> can be exploited by malicious users to cause a DoS (Denial of
> Service) or bypass certain security restrictions.
>
> 1) An error exists within the ACPI implementation of the virtual
> machine process (VMX) when collecting information about running
> states of virtual machines, which can be exploited to cause the
> process to read from invalid memory locations.
>
> 2) An unspecified error exists within the VMX when storing certain
> malformed configuration data, which can be exploited to cause a DoS
> of guest operating systems.
>
> 3) An unspecified error within the handling of general protection
> faults (GPFs) in Windows guest operating systems can be exploited to
> crash Windows virtual machines.
>
> 4) Unspecified errors when debugging applications in a 64-bit Windows
> guest operating system on a 64-bit host system can be exploited to
> e.g. cause corrupted stack pointers or kernel bugchecks.
>
> 5) A design error within the "Shared Folders" feature can be
> exploited in a guest system to read and write arbitrary files on a
> host system.
>
> Successful exploitation requires that at least one folder is shared.
> In order to write to host files, the "read only" option of the shared
> folder has to be disabled.
>
> SOLUTION:
> Update to VMware Workstation 5.5.4, Build 44386.
>
>
> PROVIDED AND/OR DISCOVERED BY:
> 1) Tavis Ormandy, Google
> 2) Sungard Ixsecurity
> 3) Ruben Santamarta, Reversemode
> 4) Ken Johnson
> 5) Greg MacManus, iDefense Labs
>
> ORIGINAL ADVISORY:
> VMware:
>
>
> 5) iDefense Labs:
> .
> php?id=521
>
