Buffer overflow in VMware, Inc products - CVE-2015-2336

Vulnerability identifier: #VU110644

CSH Severity: Medium

CVSS v4: 6.5 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:H/SI:H/SA:H]

CVE-ID: CVE-2015-2336

CWE-ID: CWE-119

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote user to execute arbitrary code on the hypervisor.

The vulnerability exists due to a boundary error in TPView.dll. A remote user on the guest OS can trigger memory corruption and execute arbitrary code on the host OS.

VMware Fusion
VMware Workstation
VMware Workstation Player
VMware Horizon Client

Install updates from vendor's website.

VMware Fusion - addressed in versions 6.0.6, 7.0.1
VMware Workstation - addressed in versions 10.0.6, 11.1.1
VMware Workstation Player - addressed in versions 6.0.6, 7.1.1
VMware Horizon Client - addressed in versions 3.2.1, 3.4.0, 5.4.2

• http://www.vmware.com/security/advisories/VMSA-2015-0004.html

• Multiple vulnerabilities in VMware Workstation and Fusion
• Multiple vulnerabilities in VMware Horizon Client