CVE-2016-7083
HighSummary
VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows, when Cortado ThinPrint virtual printing is enabled, allow guest OS users to execute arbitrary code on the host OS or cause a denial of service (host OS memory corruption) via TrueType fonts embedded in EMFSPOOL.
Risk Assessment
Exploitation of this vulnerability could lead to the compromise of the host system or its destabilization, posing a serious threat to data security and organizational continuity.
Recommendation
It is recommended to update VMware Workstation Pro and Player to version 12.5.0 or later to mitigate the risks associated with this vulnerability.
Other vulnerabilities in VMware Workstation Pro 12.x, VMware Workstation Player 12.x
See all- CVE-2016-7086High
The installer in VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows allows local users to gain privileges via a Trojan horse setup64.exe file in the installation directory.
- CVE-2016-7085High
CVE-2016-7085 describes an untrusted search path vulnerability in the installer of VMware Workstation Pro 12.x before version 12.5.0 and VMware Workstation Player 12.x before version 12.5.0 on Windows. This allows local users to gain privileges via a Trojan horse DLL in an unspecified directory.
- CVE-2016-7082High
VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows, when Cortado ThinPrint virtual printing is enabled, allow guest OS users to execute arbitrary code on the host OS or cause a denial of service (host OS memory corruption) via an EMF file.
- CVE-2016-7081High
Multiple heap-based buffer overflows in VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows, when Cortado ThinPrint virtual printing is enabled, allow guest OS users to execute arbitrary code on the host OS via unspecified vectors.
Original NVD description (English source)
VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows, when Cortado ThinPrint virtual printing is enabled, allow guest OS users to execute arbitrary code on the host OS or cause a denial of service (host OS memory corruption) via TrueType fonts embedded in EMFSPOOL.