CVE-2016-7461 The drag-and-drop (aka DnD) function in VMware Workstation Pro 12.x before 12.5.2 and VMware Workstation Player 12.x before 12.5.2 and VMware Fusion and Fusion Pro 8.x before 8.5.2 allows guest OS use...
HighCVSS 8.8
EPSS 0.56%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The drag-and-drop (aka DnD) function in VMware Workstation Pro 12.x before 12.5.2 and VMware Workstation Player 12.x before 12.5.2 and VMware Fusion and Fusion Pro 8.x before 8.5.2 allows guest OS users to execute arbitrary code on the host OS or cause a denial of service (out-of-bounds memory access on the host OS) via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| VMware Fusion | = 8.0.0 | No fix listed |
| VMware Fusion | = 8.0.1 | No fix listed |
| VMware Fusion | = 8.0.2 | No fix listed |
| VMware Fusion | = 8.1.0 | No fix listed |
| VMware Fusion | = 8.1.1 | No fix listed |
| VMware Fusion | = 8.5.0 | No fix listed |
| VMware Fusion | = 8.5.1 | No fix listed |
| VMware fusion pro | = 8.0.0 | No fix listed |
| VMware fusion pro | = 8.0.1 | No fix listed |
| VMware fusion pro | = 8.0.2 | No fix listed |
| VMware fusion pro | = 8.1.0 | No fix listed |
| VMware fusion pro | = 8.1.1 | No fix listed |
| VMware fusion pro | = 8.5.0 | No fix listed |
| VMware fusion pro | = 8.5.1 | No fix listed |
| VMware workstation player | = 12.0.0 | No fix listed |
| VMware workstation player | = 12.0.1 | No fix listed |
| VMware workstation player | = 12.1.0 | No fix listed |
| VMware workstation player | = 12.1.1 | No fix listed |
| VMware workstation player | = 12.5.0 | No fix listed |
| VMware workstation player | = 12.5.1 | No fix listed |
| VMware workstation pro | = 12.0.0 | No fix listed |
| VMware workstation pro | = 12.0.1 | No fix listed |
| VMware workstation pro | = 12.1.0 | No fix listed |
| VMware workstation pro | = 12.1.1 | No fix listed |
| VMware workstation pro | = 12.5.0 | No fix listed |
Show 1 more
| Product | Affected versions | Fixed in |
|---|---|---|
| VMware workstation pro | = 12.5.1 | No fix listed |
References
- 94280 third-party-advisory vdb-entry
- 1037282 vdb-entry
- www.vmware.com mitigation vendor-advisory