VMware Products Multiple Vulnerabilities

VMware Server
1. Various vulnerabilities are caused due to unspecified errors within certain ActiveX controls. These can be exploited to e.g. execute arbitrary code by tricking a user into visiting a malicious website.

2. An unspecified error when processing malformed requests exists within the ISAPI Extension. This can be exploited to cause a DoS by sending specially crafted requests to a vulnerable system.

3. An unspecified error related to "OpenProcess" can be exploited by malicious, local users on a host system to gain escalated privileges on the host system.

4. Some vulnerabilities in freetype can potentially be exploited by malicious people to compromise an application using the library.

VMware Workstation
1. Various vulnerabilities are caused due to unspecified errors within certain ActiveX controls. These can be exploited to e.g. execute arbitrary code by tricking a user into visiting a malicious website.

2. An unspecified error related to "OpenProcess" can be exploited by malicious, local users on a host system to gain escalated privileges on the host system.

This vulnerability affects VMware Workstation 5.x for Windows only.

3. Some vulnerabilities in freetype can potentially be exploited by malicious people to compromise an application using the library.

4. A vulnerability in cairo can potentially be exploited by malicious people to compromise an application using the library.

This vulnerability affects VMware Workstation 6.x for Linux only.

VMware Player
1. Various vulnerabilities are caused due to unspecified errors within certain ActiveX controls. These can be exploited to e.g. execute arbitrary code by tricking a user into visiting a malicious website.

2. An unspecified error related to "OpenProcess" can be exploited by malicious, local users on a host system to gain escalated privileges on the host system.

This vulnerability affects VMware Player 1.x for Linux only.

3. Some vulnerabilities in freetype can potentially be exploited by malicious people to compromise an application using the library.

4. A vulnerability in cairo can potentially be exploited by malicious people to compromise an application using the library.

VMware ACE
1. Various vulnerabilities are caused due to unspecified errors within certain ActiveX controls. These can be exploited to e.g. execute arbitrary code by tricking a user into visiting a malicious website.

2. An unspecified error related to "OpenProcess" can be exploited by malicious, local users on a host system to gain escalated privileges on the host system.

This vulnerability affects VMware ACE 1.x for Windows only.

VMware Fusion
1. Some vulnerabilities in freetype can potentially be exploited by malicious people to compromise an application using the library.

2. A vulnerability in cairo can potentially be exploited by malicious people to compromise an application using the library.