CVE-2016-7082
HighSummary
VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows, when Cortado ThinPrint virtual printing is enabled, allow guest OS users to execute arbitrary code on the host OS or cause a denial of service (host OS memory corruption) via an EMF file.
Risk Assessment
This vulnerability can lead to serious security risks, allowing attackers to execute code on the host system, potentially resulting in data loss or system takeover.
Recommendation
It is recommended to update VMware Workstation Pro and Player to version 12.5.0 or later to mitigate this vulnerability and to disable virtual printing if it is not necessary.
Other vulnerabilities in VMware Workstation Pro 12.x, VMware Workstation Player 12.x
See all- CVE-2016-7086High
The installer in VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows allows local users to gain privileges via a Trojan horse setup64.exe file in the installation directory.
- CVE-2016-7085High
CVE-2016-7085 describes an untrusted search path vulnerability in the installer of VMware Workstation Pro 12.x before version 12.5.0 and VMware Workstation Player 12.x before version 12.5.0 on Windows. This allows local users to gain privileges via a Trojan horse DLL in an unspecified directory.
- CVE-2016-7083High
VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows, when Cortado ThinPrint virtual printing is enabled, allow guest OS users to execute arbitrary code on the host OS or cause a denial of service (host OS memory corruption) via TrueType fonts embedded in EMFSPOOL.
- CVE-2016-7081High
Multiple heap-based buffer overflows in VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows, when Cortado ThinPrint virtual printing is enabled, allow guest OS users to execute arbitrary code on the host OS via unspecified vectors.
Original NVD description (English source)
VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows, when Cortado ThinPrint virtual printing is enabled, allow guest OS users to execute arbitrary code on the host OS or cause a denial of service (host OS memory corruption) via an EMF file.