First published: Thu Dec 29 2016(Updated: )
The drag-and-drop (aka DnD) function in VMware Workstation Pro 12.x before 12.5.2 and VMware Workstation Player 12.x before 12.5.2 and VMware Fusion and Fusion Pro 8.x before 8.5.2 allows guest OS users to execute arbitrary code on the host OS or cause a denial of service (out-of-bounds memory access on the host OS) via unspecified vectors.
Credit: security@vmware.com
Affected Software | Affected Version | How to fix |
---|---|---|
VMware Fusion | =8.0.0 | |
VMware Fusion | =8.0.1 | |
VMware Fusion | =8.0.2 | |
VMware Fusion | =8.1.0 | |
VMware Fusion | =8.1.1 | |
VMware Fusion | =8.5.0 | |
VMware Fusion | =8.5.1 | |
Vmware Fusion Pro | =8.0.0 | |
Vmware Fusion Pro | =8.0.1 | |
Vmware Fusion Pro | =8.0.2 | |
Vmware Fusion Pro | =8.1.0 | |
Vmware Fusion Pro | =8.1.1 | |
Vmware Fusion Pro | =8.5.0 | |
Vmware Fusion Pro | =8.5.1 | |
VMware Workstation Player | =12.0.0 | |
VMware Workstation Player | =12.0.1 | |
VMware Workstation Player | =12.1.0 | |
VMware Workstation Player | =12.1.1 | |
VMware Workstation Player | =12.5.0 | |
VMware Workstation Player | =12.5.1 | |
VMware Workstation Pro | =12.0.0 | |
VMware Workstation Pro | =12.0.1 | |
VMware Workstation Pro | =12.1.0 | |
VMware Workstation Pro | =12.1.1 | |
VMware Workstation Pro | =12.5.0 | |
VMware Workstation Pro | =12.5.1 | |
Microsoft Windows |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.