CVE-2016-7082: Buffer Overflow
First published: Thu Dec 29 2016(Updated: )
VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows, when Cortado ThinPrint virtual printing is enabled, allow guest OS users to execute arbitrary code on the host OS or cause a denial of service (host OS memory corruption) via an EMF file.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| VMware Workstation Player | =12.0.0 | |
| VMware Workstation Player | =12.0.1 | |
| VMware Workstation Player | =12.1.0 | |
| VMware Workstation Player | =12.1.1 | |
| VMware Workstation Pro | =12.0.0 | |
| VMware Workstation Pro | =12.0.1 | |
| VMware Workstation Pro | =12.1.0 | |
| VMware Workstation Pro | =12.1.1 | |
| Microsoft Windows |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2016-7082?
CVE-2016-7082 is rated as critical due to its potential for arbitrary code execution on the host OS.
How do I fix CVE-2016-7082?
To fix CVE-2016-7082, upgrade VMware Workstation Pro or Player to version 12.5.0 or later.
What versions are affected by CVE-2016-7082?
CVE-2016-7082 affects VMware Workstation Pro and Player versions 12.0.0 to 12.1.1.
Can CVE-2016-7082 lead to data loss?
Yes, CVE-2016-7082 can potentially lead to data loss due to host OS memory corruption.
Is there a workaround for CVE-2016-7082 if I can't upgrade?
Disabling Cortado ThinPrint virtual printing may mitigate the risks associated with CVE-2016-7082.
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/last-modified-date
- agent/references
- agent/severity
- agent/author
- agent/tags
- agent/description
- agent/event
- agent/first-publish-date
- agent/source
- vendor/vmware
- canonical/vmware workstation player
- version/vmware workstation player/12.0.0
- version/vmware workstation player/12.0.1
- version/vmware workstation player/12.1.0
- version/vmware workstation player/12.1.1
- canonical/vmware workstation pro
- version/vmware workstation pro/12.0.0
- version/vmware workstation pro/12.0.1
- version/vmware workstation pro/12.1.0
- version/vmware workstation pro/12.1.1
- vendor/microsoft
- canonical/microsoft windows