CVE-2016-7082: Buffer Overflow
Published Dec 29, 2016
·Updated
VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows, when Cortado ThinPrint virtual printing is enabled, allow guest OS users to execute arbitrary code on the host OS or cause a denial of service (host OS memory corruption) via an EMF file.
Affected Software
9 affected components
VMware Workstation Player=12.0.0
VMware Workstation Player=12.0.1
VMware Workstation Player=12.1.0
VMware Workstation Player=12.1.1
VMware Workstation Pro=12.0.0
VMware Workstation Pro=12.0.1
VMware Workstation Pro=12.1.0
VMware Workstation Pro=12.1.1
Microsoft Windows
Event History
Dec 29, 2016
CVE Published
via MITRE·09:02 AM
Data Sourced
via MITRE·09:02 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-7082?
CVE-2016-7082 is rated as critical due to its potential for arbitrary code execution on the host OS.
2
How do I fix CVE-2016-7082?
To fix CVE-2016-7082, upgrade VMware Workstation Pro or Player to version 12.5.0 or later.
3
What versions are affected by CVE-2016-7082?
CVE-2016-7082 affects VMware Workstation Pro and Player versions 12.0.0 to 12.1.1.
4
Can CVE-2016-7082 lead to data loss?
Yes, CVE-2016-7082 can potentially lead to data loss due to host OS memory corruption.
5
Is there a workaround for CVE-2016-7082 if I can't upgrade?
Disabling Cortado ThinPrint virtual printing may mitigate the risks associated with CVE-2016-7082.