CVE-2011-3868 Buffer overflow in VMware Workstation 7.x before 7.1.5, VMware Player 3.x before 3.1.5, VMware Fusion 3.1.x before 3.1.3, and VMware AMS allows remote attackers to execute arbitrary code via a crafted...
HighCVSS 9.3
EPSS 5.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in VMware Workstation 7.x before 7.1.5, VMware Player 3.x before 3.1.5, VMware Fusion 3.1.x before 3.1.3, and VMware AMS allows remote attackers to execute arbitrary code via a crafted UDF filesystem in an ISO image.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| VMware Workstation | = 7.0 | No fix listed |
| VMware Workstation | = 7.0.1 | No fix listed |
| VMware Workstation | = 7.1 | No fix listed |
| VMware Workstation | = 7.1.1 | No fix listed |
| VMware Workstation | = 7.1.2 | No fix listed |
| VMware Workstation | = 7.1.3 | No fix listed |
| VMware Workstation | = 7.1.4 | No fix listed |
| VMware player | = 3.0 | No fix listed |
| VMware player | = 3.0.1 | No fix listed |
| VMware player | = 3.1 | No fix listed |
| VMware player | = 3.1.1 | No fix listed |
| VMware player | = 3.1.2 | No fix listed |
| VMware player | = 3.1.3 | No fix listed |
| VMware player | = 3.1.4 | No fix listed |
| VMware Fusion | = 3.1 | No fix listed |
| VMware Fusion | = 3.1.1 | No fix listed |
| VMware Fusion | = 3.1.2 | No fix listed |
| VMware ams | All versions | No fix listed |
References
- 76060 vdb-entry
- 46241 third-party-advisory
- GLSA-201209-25 vendor-advisory
- 20111005 VMSA-2011-0011 VMware hosted products address remote code execution vulnerability mailing-list
- 49942 vdb-entry
- 1026139 vdb-entry
- www.vmware.com patch vendor-advisory