The host is installed with VMWare product(s) which are vulnerable to security bypass vulnerability.

Successful exploitation allows attackers to display a malicious file if they manage to get their file onto the system prior to installation. Impact Level: Application

Upgrade to player 3.1.2 build 301548 http://www.vmware.com/products/player/ Upgrade VMware Workstation 7.1.2 build 301548 http://www.vmware.com/download/ace/

The vulnerability is due to an error in the 'installer', which will load an 'index.htm' file located in the current working directory.

VMware Player 3.0 before 3.1.2 build 301548 VMware Workstation 7.0 before 7.1.2 build 301548 on Windows.

• http://lists.vmware.com/pipermail/security-announce/2010/000105.html
• http://secunia.com/advisories/41574
• http://securitytracker.com/alerts/2010/Sep/1024481.html
• http://www.vmware.com/security/advisories/VMSA-2010-0014.html
• http://www.vupen.com/english/advisories/2010/2491

---

Updated on 2015-03-25