The host is installed with VMWare products and are prone to memory corruption and buffer overflow Vulnerability

Successful exploitation will allow attacker to corrupt heap memory by tricking a user into visiting a malicious website or playing a malicious file. Impact Level: System/Application

upgrade workstation 6.5.5 build 328052 or 7.1.2 build 301548 http://www.vmware.com/products/ws/ Upgrade to VMware player 2.5.5 build 246459 and 3.1.2 build 301548 http://www.vmware.com/products/player/ For VMware Server version 2.x, No solution or patch was made available for at least one year since disclosure of this vulnerability. Likely none will be provided anymore. General solution options are to upgrade to a newer release, disable respective features, remove the product or replace the product by another one.

The flaw is due to the VMnc codec 'vmnc.dll' driver which does not properly verify the size when handling 'ICM_DECOMPRESS' driver messages, which can be exploited to corrupt heap memory.

VMware Server version 2.x VMware Player 2.5.x before 2.5.5 build 246459 and 3.x before 3.1.2 build 301548 VMware Workstation 6.5.x before 6.5.5 build 328052 and 7.x before 7.1.2 build 301548

• http://lists.vmware.com/pipermail/security-announce/2010/000112.html
• http://secunia.com/advisories/42481
• http://www.vmware.com/security/advisories/VMSA-2010-0018.html

---

Updated on 2015-03-25