CVE-2016-7461: Buffer Overflow
The drag-and-drop (aka DnD) function in VMware Workstation Pro 12.x before 12.5.2 and VMware Workstation Player 12.x before 12.5.2 and VMware Fusion and Fusion Pro 8.x before 8.5.2 allows guest OS users to execute arbitrary code on the host OS or cause a denial of service (out-of-bounds memory access on the host OS) via unspecified vectors.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-7461?
CVE-2016-7461 has a critical severity level due to its potential to allow arbitrary code execution on the host OS.
How do I fix CVE-2016-7461?
To address CVE-2016-7461, users should upgrade to VMware Workstation Pro 12.5.2, Workstation Player 12.5.2, or Fusion and Fusion Pro 8.5.2 or later.
Which VMware products are affected by CVE-2016-7461?
CVE-2016-7461 affects VMware Workstation Pro and Player versions 12.x before 12.5.2, and Fusion and Fusion Pro versions 8.x before 8.5.2.
What type of attack does CVE-2016-7461 facilitate?
CVE-2016-7461 can be exploited to execute arbitrary code on the host OS or to cause a denial of service.
Can guest OS users exploit CVE-2016-7461?
Yes, guest OS users can exploit CVE-2016-7461 to perform unauthorized actions on the host operating system.