Skip to content
NewA calmer, faster ZeroHour

CVE-2016-7461 code execution flaw affects VMware Workstation

Security Affairsby @securityaffairs ()1 min read3 · 2 reads
Analyze CVE-2016-7461 with Vani AIImpact, affected versions, exploitation, mitigations and detection

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2016-5195
Dirty COW Race Condition Enables Local Privilege Escalation in the Linux Kernel
7.084%KEVPoC ×5
KEV
CVE-2016-7461
The drag-and-drop (aka DnD) function in VMware Workstation Pro 12.x before 12.5.2 and VMware Workstation Player 12.x before 12.5.2 and VMware Fusion and Fusion…
8.8<1%

From the original article

1 min read at securityaffairs.com

VMware has patched a critical out-of-bounds memory access vulnerability, tracked as CVE-2016-7461 , affecting its Workstation and Fusion products. The flaw, that resides in the affects the drag-and-drop function, can be exploited by attackers to execute arbitrary code on the host operating system running Fusion or Workstation. The security vulnerability affects Workstation Player and Pro 12.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.