> VMware Workstation Multiple Vulnerabilities
> SECUNIA ADVISORY ID:
> VERIFY ADVISORY:
> Moderately critical
> Security Bypass, DoS
> Local system
> VMware Workstation 5.x
> Some vulnerabilities have been reported in VMware Workstation, which
> can be exploited by malicious users to cause a DoS (Denial of
> Service) or bypass certain security restrictions.
> 1) An error exists within the ACPI implementation of the virtual
> machine process (VMX) when collecting information about running
> states of virtual machines, which can be exploited to cause the
> process to read from invalid memory locations.
> 2) An unspecified error exists within the VMX when storing certain
> malformed configuration data, which can be exploited to cause a DoS
> of guest operating systems.
> 3) An unspecified error within the handling of general protection
> faults (GPFs) in Windows guest operating systems can be exploited to
> crash Windows virtual machines.
> 4) Unspecified errors when debugging applications in a 64-bit Windows
> guest operating system on a 64-bit host system can be exploited to
> e.g. cause corrupted stack pointers or kernel bugchecks.
> 5) A design error within the "Shared Folders" feature can be
> exploited in a guest system to read and write arbitrary files on a
> host system.
> Successful exploitation requires that at least one folder is shared.
> In order to write to host files, the "read only" option of the shared
> folder has to be disabled.
> Update to VMware Workstation 5.5.4, Build 44386.
> PROVIDED AND/OR DISCOVERED BY:
> 1) Tavis Ormandy, Google
> 2) Sungard Ixsecurity
> 3) Ruben Santamarta, Reversemode
> 4) Ken Johnson
> 5) Greg MacManus, iDefense Labs
> ORIGINAL ADVISORY:
> 5) iDefense Labs: