CVE-2015-2336 TPView.dll in VMware Workstation 10.x before 10.0.6 and 11.x before 11.1.1, VMware Player 6.x before 6.0.6 and 7.x before 7.1.1, and VMware Horizon Client 3.2.x before 3.2.1, 3.3.x, and 5.x local-mode...
MediumCVSS 5.8
EPSS 0.75%
- Published
- Updated
- Exploit status
- No public exploit known
Description
TPView.dll in VMware Workstation 10.x before 10.0.6 and 11.x before 11.1.1, VMware Player 6.x before 6.0.6 and 7.x before 7.1.1, and VMware Horizon Client 3.2.x before 3.2.1, 3.3.x, and 5.x local-mode before 5.4.2 on Windows does not properly allocate memory, which allows guest OS users to execute arbitrary code on the host OS via unspecified vectors, a different vulnerability than CVE-2012-0897.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| VMware Fusion | = 6.0 | No fix listed |
| VMware Fusion | = 6.0.1 | No fix listed |
| VMware Fusion | = 6.0.2 | No fix listed |
| VMware Fusion | = 6.0.3 | No fix listed |
| VMware Fusion | = 6.0.4 | No fix listed |
| VMware Fusion | = 6.0.5 | No fix listed |
| VMware Fusion | = 7.0 | No fix listed |
| VMware Fusion | = 7.0.1 | No fix listed |
| VMware player | = 6.0 | No fix listed |
| VMware player | = 6.0.1 | No fix listed |
| VMware player | = 6.0.2 | No fix listed |
| VMware player | = 6.0.3 | No fix listed |
| VMware player | = 6.0.4 | No fix listed |
| VMware player | = 6.0.5 | No fix listed |
| VMware player | = 7.0 | No fix listed |
| VMware player | = 7.1 | No fix listed |
| VMware Workstation | = 10.0 | No fix listed |
| VMware Workstation | = 10.0.1 | No fix listed |
| VMware Workstation | = 10.0.2 | No fix listed |
| VMware Workstation | = 10.0.3 | No fix listed |
| VMware Workstation | = 10.0.4 | No fix listed |
| VMware Workstation | = 10.0.5 | No fix listed |
| VMware Workstation | = 11.0 | No fix listed |
| VMware Workstation | = 11.1 | No fix listed |
| VMware horizon client | = 3.2.0 | No fix listed |
Show 3 more
| Product | Affected versions | Fixed in |
|---|---|---|
| VMware horizon client | = 3.3 | No fix listed |
| VMware horizon view client | = 5.4 | No fix listed |
| VMware horizon view client | = 5.4.1 | No fix listed |
References
- 75095 vdb-entry
- 1032529 vdb-entry
- 1032530 vdb-entry
- www.vmware.com patch vendor-advisory