CVE-2016-7081
HighSummary
Multiple heap-based buffer overflows in VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows, when Cortado ThinPrint virtual printing is enabled, allow guest OS users to execute arbitrary code on the host OS via unspecified vectors.
Risk Assessment
This vulnerability may lead to remote code execution, posing a serious threat to the host system's security and the organization's data.
Recommendation
It is recommended to update VMware Workstation Pro and Player to version 12.5.0 or later to mitigate the risks associated with this vulnerability.
Other vulnerabilities in VMware Workstation Pro 12.x, VMware Workstation Player 12.x
See all- CVE-2016-7086High
The installer in VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows allows local users to gain privileges via a Trojan horse setup64.exe file in the installation directory.
- CVE-2016-7085High
CVE-2016-7085 describes an untrusted search path vulnerability in the installer of VMware Workstation Pro 12.x before version 12.5.0 and VMware Workstation Player 12.x before version 12.5.0 on Windows. This allows local users to gain privileges via a Trojan horse DLL in an unspecified directory.
- CVE-2016-7083High
VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows, when Cortado ThinPrint virtual printing is enabled, allow guest OS users to execute arbitrary code on the host OS or cause a denial of service (host OS memory corruption) via TrueType fonts embedded in EMFSPOOL.
- CVE-2016-7082High
VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows, when Cortado ThinPrint virtual printing is enabled, allow guest OS users to execute arbitrary code on the host OS or cause a denial of service (host OS memory corruption) via an EMF file.
Original NVD description (English source)
Multiple heap-based buffer overflows in VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows, when Cortado ThinPrint virtual printing is enabled, allow guest OS users to execute arbitrary code on the host OS via unspecified vectors.