CVE-2015-2336: Medium severity vmware fusion vulnerability
TPView.dll in VMware Workstation 10.x before 10.0.6 and 11.x before 11.1.1, VMware Player 6.x before 6.0.6 and 7.x before 7.1.1, and VMware Horizon Client 3.2.x before 3.2.1, 3.3.x, and 5.x local-mode before 5.4.2 on Windows does not properly allocate memory, which allows guest OS users to execute arbitrary code on the host OS via unspecified vectors, a different vulnerability than CVE-2012-0897.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2015-2336?
CVE-2015-2336 is rated as important, indicating a significant impact on system security.
How do I fix CVE-2015-2336?
To fix CVE-2015-2336, you should update to the latest version of VMware Workstation, Player, or Horizon Client as specified by VMware.
Which versions of VMware are affected by CVE-2015-2336?
CVE-2015-2336 affects VMware Workstation 10.x and 11.x, VMware Player 6.x and 7.x, and VMware Horizon Client versions before the respective patched versions.
What type of vulnerability is CVE-2015-2336?
CVE-2015-2336 is a memory allocation vulnerability that can lead to code execution within the guest operating system.
Who is at risk from CVE-2015-2336?
Users of affected versions of VMware products running on Windows are at risk from CVE-2015-2336.