CVE-2016-7083
published 2016-12-29CVE-2016-7083: VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows, when Cortado ThinPrint virtual printing is enabled…
PriorityP346high7.8CVSS 3.0
AVLACHPRLUINSCCHIHAH
EXPLOIT
EPSS
1.50%
71.4th percentile
VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows, when Cortado ThinPrint virtual printing is enabled, allow guest OS users to execute arbitrary code on the host OS or cause a denial of service (host OS memory corruption) via TrueType fonts embedded in EMFSPOOL.
Affected
14 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| vmware | vmware_esxi | — | — |
| vmware | vmware_fusion | — | — |
| vmware | vmware_tools | — | — |
| vmware | vmware_workstation | — | — |
| vmware | workstation_player | — | — |
| vmware | workstation_player | — | — |
| vmware | workstation_player | — | — |
| vmware | workstation_player | — | — |
| vmware | workstation_player | — | — |
| vmware | workstation_pro | — | — |
| vmware | workstation_pro | — | — |
| vmware | workstation_pro | — | — |
| vmware | workstation_pro | — | — |
| vmware | workstation_pro | — | — |
CVSS provenance
nvdv3.07.8HIGHCVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
nvdv2.05.9MEDIUMAV:L/AC:M/Au:N/C:P/I:P/A:C
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-gjp3-fqv5-xh2f: VMware Workstation Pro 12
ghsa_unreviewed·2022-05-17
CVE-2016-7083 [HIGH] CWE-119 GHSA-gjp3-fqv5-xh2f: VMware Workstation Pro 12
VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows, when Cortado ThinPrint virtual printing is enabled, allow guest OS users to execute arbitrary code on the host OS or cause a denial of service (host OS memory corruption) via TrueType fonts embedded in EMFSPOOL.
VMware
VMware ESXi, Workstation, Fusion, and Tools updates address multiple security issues
vendor_vmware·2016-09-13·CVSS 7.8
CVE-2016-7079 [HIGH] VMware ESXi, Workstation, Fusion, and Tools updates address multiple security issues
VMSA-2016-0014: VMware ESXi, Workstation, Fusion, and Tools updates address multiple security issues
a. VMware Workstation heap-based buffer overflow vulnerabilities via Cortado ThinPrint VMware Workstation contains vulnerabilities that may allow a Windows-based Virtual Machine (VM) to trigger a heap-based buffer overflow. Exploitation of these issues may lead to arbitrary code execution in VMware Workstation running on Windows. Exploitation is only possible if virtual printing has been enabled in VMware Workstation. This feature is not enabled by default. VMware Knowledge Base article 2146810 documents the procedure for enabling and disabling this feature. VMware would like to thank E0DB6391795D7F629B5077842E649393 working with Trend Micro's Zero Day Initiative for reporting this issue t
No detection rules found.
No writeups or analysis indexed.
http://www.securityfocus.com/bid/92934http://www.securitytracker.com/id/1036805http://www.vmware.com/security/advisories/VMSA-2016-0014.htmlhttps://www.exploit-db.com/exploits/40398/http://www.securityfocus.com/bid/92934http://www.securitytracker.com/id/1036805http://www.vmware.com/security/advisories/VMSA-2016-0014.htmlhttps://www.exploit-db.com/exploits/40398/
2016-12-29
Published