PT-2015-1430 · Vmware · Vmware Player+4
Published
2015-06-13
·
Updated
2016-12-31
·
CVE-2015-2339
CVSS v2.0
6.1
Medium
| Vector | AV:A/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
VMware Workstation versions 10.0.0 through 10.0.5
VMware Workstation versions 11.0.0 through 11.1.0
VMware Player versions 6.0.0 through 6.0.5
VMware Player versions 7.0.0 through 7.1.0
VMware Horizon Client versions 3.2.0 through 3.2.0
VMware Horizon Client version 3.3.x
VMware Horizon Client versions 5.x before 5.4.2
VMware Fusion (affected versions not specified)
VMware Horizon View Client (affected versions not specified)
Description
The vulnerability in the TPView.dll library is related to resource management errors. Exploitation of the vulnerability can allow users of the guest operating system to cause a denial of service in the host operating system.
Recommendations
For VMware Workstation versions 10.0.0 through 10.0.5, update to version 10.0.6 or later.
For VMware Workstation versions 11.0.0 through 11.1.0, update to version 11.1.1 or later.
For VMware Player versions 6.0.0 through 6.0.5, update to version 6.0.6 or later.
For VMware Player versions 7.0.0 through 7.1.0, update to version 7.1.1 or later.
For VMware Horizon Client versions 3.2.0 through 3.2.0, update to version 3.2.1 or later.
For VMware Horizon Client version 3.3.x, update to a version outside of the 3.3.x range or apply a patch if available.
For VMware Horizon Client versions 5.x before 5.4.2, update to version 5.4.2 or later.
For VMware Fusion, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
For VMware Horizon View Client, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
DoS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Vmware Fusion
Vmware Horizon Client
Vmware Horizon View Client
Vmware Player
Vmware Workstation