Buffer overflow in VMware, Inc products - CVE-2015-2340

Vulnerability identifier: #VU110648

CSH Severity: Medium

CVSS v4: 6.5 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:H/SI:H/SA:H]

CVE-ID: CVE-2015-2340

CWE-ID: CWE-119

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote user to execute arbitrary code on the hypervisor.

The vulnerability exists due to a boundary error in TPInt.dll. A remote user on the guest OS can trigger memory corruption and execute arbitrary code on the host OS.

VMware Fusion
VMware Workstation
VMware Workstation Player
VMware Horizon Client

Install updates from vendor's website.

VMware Fusion - addressed in versions 6.0.6, 7.0.1
VMware Workstation - addressed in versions 10.0.6, 11.1.1
VMware Workstation Player - addressed in versions 6.0.6, 7.1.1
VMware Horizon Client - addressed in versions 3.2.1, 3.4.0, 5.4.2

• http://www.vmware.com/security/advisories/VMSA-2015-0004.html

• Multiple vulnerabilities in VMware Workstation and Fusion
• Multiple vulnerabilities in VMware Horizon Client