Buffer overflow in VMware, Inc products - CVE-2015-2337

Vulnerability identifier: #VU110645

CSH Severity: Medium

CVSS v4: 6.5 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:H/SI:H/SA:H]

CVE-ID: CVE-2015-2337

CWE-ID: CWE-119

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote user to execute arbitrary code on the hypervisor.

The vulnerability exists due to a boundary error in TPInt.dll. A remote user on the guest OS can trigger memory corruption and execute arbitrary code on the host OS.

VMware Fusion
VMware Workstation
VMware Workstation Player
VMware Horizon Client

Install updates from vendor's website.

VMware Fusion - addressed in versions 6.0.6, 7.0.1
VMware Workstation - addressed in versions 10.0.6, 11.1.1
VMware Workstation Player - addressed in versions 6.0.6, 7.1.1
VMware Horizon Client - addressed in versions 3.2.1, 3.4.0, 5.4.2

• http://www.vmware.com/security/advisories/VMSA-2015-0004.html

• Multiple vulnerabilities in VMware Workstation and Fusion
• Multiple vulnerabilities in VMware Horizon Client