VMware products are prone to a directory-traversal vulnerability because they fail to sufficiently sanitize user-supplied input data. Exploiting the issue may allow an attacker to obtain sensitive information from the host operating system that could aid in further attacks.
VMware products are prone to a privilege-escalation vulnerability because they fail to properly handle certain page faults. An attacker can exploit this issue to run arbitrary code with superuser privileges. Successful attacks will completely compromise affected computers. Note that this issue does not affect the host operating system.
Published: Oct 27 2009
Updated: Oct 27 2009