VMware Workstation 10.x before 10.0.5, VMware Player 6.x before 6.0.6, and VMware Fusion 6.x before 6.0.6 and 7.x before 7.0.1 allow attackers to cause a denial of service against a 32-bit guest OS or 64-bit host OS via a crafted RPC command.

The version of VMware Workstation installed on the remote Linux host is 10.x prior to 10.0.6. It is, therefore, affected by a denial of service vulnerability due to improper validation of user-supplied input to a remote procedure call (RPC) command. An unauthenticated, remote attacker can exploit this, via a crafted command, to crash the host or guest operating systems.

The version of VMware Player installed on the remote Linux host is 6.x prior to 6.0.6. It is, therefore, affected by a denial of service vulnerability due to improper validation of user-supplied input to a remote procedure call (RPC) command. An unauthenticated, remote attacker can exploit this, via a crafted command, to crash the host or guest operating systems.

The version of VMware Player installed on the remote Windows host is 6.x prior to 6.0.6. It is, therefore, affected by multiple vulnerabilities :

  - An arbitrary code execution vulnerability exists due to     a stack-based buffer overflow condition in the JPEG2000     plugin that is triggered when parsing a Quantization     Default (QCD) marker segment in a JPEG2000 (JP2) image     file. A remote attacker can exploit this, using a     specially crafted image, to execute arbitrary code or     cause a denial of service condition. (CVE-2012-0897)

  - Multiple unspecified remote code execution     vulnerabilities exists in 'TPView.dll' and 'TPInt.dll'     library files. (CVE-2015-2336, CVE-2015-2337)

  - The 'TPview.dll' and 'TPInt.dll' library files fail to     properly handle memory allocation. A remote attacker can     exploit this to cause a denial of service.
    (CVE-2015-2338, CVE-2015-2339, CVE-2015-2340)

  - A denial of service vulnerability exists due to improper     validation of user-supplied input to a remote procedure     call (RPC) command. An unauthenticated, remote attacker     can exploit this, via a crafted command, to crash the     host or guest operating systems. (CVE-2015-2341)

The version of VMware Fusion installed on the remote Mac OS X host is version 6.x prior to 6.0.6 or 7.x prior to 7.0.1. It is, therefore, affected by a denial of service vulnerability due to improper validation of user-supplied input to a remote procedure call (RPC) command. An unauthenticated, remote attacker can exploit this, via a crafted command, to crash the host or guest operating systems.

The version of VMware Workstation installed on the remote Windows host is 10.x prior to 10.0.5. It is, therefore, affected by multiple vulnerabilities :

  - An unspecified flaw exists that allows a local attacker     to escalate privileges or cause a denial of service     via an arbitrary write to a file. (CVE-2014-8370)

  - An input validation error exists in the Host Guest File     System (HGFS) that allows a local attacker to cause a     denial of service of the guest operating system.
    (CVE-2015-1043)

  - An input validation error exists in the VMware     Authorization process (vmware-authd) that allows a     remote attacker to cause a denial of service of the host     operating system. (CVE-2015-1044)

  - A denial of service vulnerability exists due to improper     validation of user-supplied input to a remote procedure     call (RPC) command. An unauthenticated, remote attacker     can exploit this, via a crafted command, to crash the     host or guest operating systems. (CVE-2015-2341)

ID	Name	Product	Family	Type	Severity
84222	VMware Workstation 10.x < 10.0.6 RPC Command DoS (VMSA-2015-0004) (Linux)	Nessus	General	Local	high
84221	VMware Player 6.x < 6.0.6 RPC Command DoS (VMSA-2015-0004) (Linux)	Nessus	General	Local	high
84219	VMware Player 6.x < 6.0.6 Multiple Vulnerabilities (VMSA-2015-0004)	Nessus	Windows	Local	medium
84218	VMware Fusion 6.x < 6.0.6 / 7.x < 7.0.1 RPC Command DoS	Nessus	MacOS X Local Security Checks	Local	high
81187	VMware Workstation 10.x < 10.0.5 Multiple Vulnerabilities (VMSA-2015-0001 / VMSA-2015-0004) (Windows)	Nessus	Windows	Local	medium

Detections

Analytics

CVE-2015-2341

high

Tenable Plugins

high

high

medium

high

medium