KLA10385 ACE vulnerability in VMware

A buffer overflow was found in VMware products. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed ISO image.

Original advisories

VMware bulletin

Related products

VMware-Workstation

VMware-Player

VMware-Fusion

CVE list

CVE-2011-3868 critical

Solution

Update to latest version

VMWare Products

Impacts

• ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

Affected Products

• VMware Workstation versions 7.1.4 and earlierVMware Player versions 3.1.4 and earlierVMware Fusion versions 3.1.2 and earlier