CVE-2015-1043: Input Validation

Published Jan 29, 2015

Updated

The Host Guest File System (HGFS) in VMware Workstation 10.x before 10.0.5, VMware Player 6.x before 6.0.5, and VMware Fusion 6.x before 6.0.5 and 7.x before 7.0.1 allows guest OS users to cause a guest OS denial of service via unspecified vectors.

Affected Software

16 affected components

VMware Fusion=6.0

VMware Fusion=6.0.1

VMware Fusion=6.0.2

VMware Fusion=6.0.3

VMware Fusion=6.0.4

VMware Fusion=7.0

VMware Workstation=10.0

VMware Workstation=10.0.1

VMware Workstation=10.0.2

VMware Workstation=10.0.3

VMware Workstation=10.0.4

VMware Player=6.0

VMware Player=6.0.1

VMware Player=6.0.2

VMware Player=6.0.3

VMware Player=6.0.4

Remediation

Patch Available

http://www.vmware.com/security/advisories/VMSA-2015-0001.html

Event History

Jan 29, 2015

CVE Published

via MITRE·06:00 PM

Data Sourced

via MITRE·06:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2015-1043?

CVE-2015-1043 is classified as a denial of service vulnerability affecting VMware products.

How do I fix CVE-2015-1043?

To fix CVE-2015-1043, you should update affected VMware products to their latest versions: VMware Workstation 10.0.5 or later, VMware Player 6.0.5 or later, and VMware Fusion 6.0.5 or later.

Which VMware products are impacted by CVE-2015-1043?

CVE-2015-1043 impacts VMware Workstation 10.x, VMware Player 6.x, and VMware Fusion 6.x and 7.x up to specific versions.

Can CVE-2015-1043 be exploited remotely?

CVE-2015-1043 does not allow for remote exploitation; it requires access to the guest operating system.

What are the symptoms of an exploit for CVE-2015-1043?

Exploitation of CVE-2015-1043 can lead to a denial of service in the guest operating system.