Threat Level: green Handler on Duty: Didier Stevens

SANS ISC: VMware Advisory - UDF file system handling - SANS Internet Storm Center SANS ISC InfoSec Forums

Watch ISC TV. Great for NOCs, SOCs and Living Rooms: https://isctv.sans.edu

Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
VMware Advisory - UDF file system handling

VMware has released security advisory VMSA-2011-0011 which describes a remote code execution vulnerability in VMware Workstation 7.1.4 and earlier, VMware player 3.1.4 and earlier, and VMware Fusion 3.1.2 and earlier.  Note, VMware released Workstation 8 and Fusion 4 late last month, so if you have upgraded to the bleeding edge, you are not affected.

---------------
Jim Clausing, GIAC GSE #26
jclausing --at-- isc [dot] sans (dot) edu

I will be teaching next: Reverse-Engineering Malware: Malware Analysis Tools and Techniques - SANS DFIR Summit & Training 2022

 Jim

423 Posts
ISC Handler
Oct 5th 2011
Thread locked Subscribe Oct 5th 2011
1 decade ago
They also released VMWare Player 4.0.0 two weeks ago, which I imagine is also "bleeding edge" and not affected.
 Anonymous
Quote Oct 5th 2011
1 decade ago

Sign Up for Free or Log In to start participating in the conversation!