Security News -  Security Reviews -   Exploits -  Tools -  UNIX Focus -  Windows Focus
Ask the Team  Mailing Lists  Advertising Info  Advisories  About SecuriTeam  Blogs Brought to you by: Suppliers of: Website Testing Tools Network Testing Tools Software Testing Tools SecuriTeam in Your Inbox New vulnerability? New tool? Tell us (Our PGP key). CanSecWest 2012 2nd Annual Cyber Security Hack In Paris	VMware Frame Buffer Parameter Heap-Based Buffer Overflow Vulnerability 8 Sep. 2009    Summary The VMware movie decoder contains the VMnc media codec that is required to play back movies recorded with VMware Workstation, VMware Player and VMware ACE, in any compatible media player. The movie decoder is installed as part of VMware Workstation, VMware Player and VMware ACE, or can be downloaded as a stand alone package. Several vulnerabilities in the VMnc codec can be exploited to cause heap-based buffer overflows via specially crafted video files containing incorrect framebuffer parameters.   Credit: The information has been provided by Alin Rad Pop and Will Dormann. Website Security Scan Code Vulnerability Test Network Assessment Tool Detect hidden vulnerabilities Exhaustive automated testing Real-time, continuous security Get guidance from professionals of internal or 3rd party code. scanning for your entire network    Details Protect your website! Use an External Vulnerability Scanner! Nothing to install. First report in 1 hour! www.beyondsecurity.com/vulnerability-scanner Vulnerable Systems:  * VMware Workstation Movie Decoder version 6.5.2 and prior  * VMware Workstation version 6.5.2 and prior  * VMware Player version 2.5.2 and prior  * VMware ACE version 2.5.2 and prior Immune Systems:  * VMware Workstation Movie Decoder version 6.5.3  * VMware Workstation version 6.5.3  * VMware Player version 2.5.3  * VMware ACE version 2.5.3 Please review the patch/release notes for your product and version and verify the md5sum and/or the sha1sum of your downloaded file. VMware Workstation Movie Decoder stand alone    http://www.vmware.com/download/ws/drivers_tools.html http://download3.vmware.com/software/wkst/VMware-moviedecoder-6.5.3-185404.exe    md5sum: 2e9de20045c44bc1c03daa3e6fd9a611    sha1sum: 9cd8f9578223310db988131885ffda6c9a4de873 VMware Workstation 6.5.3    http://www.vmware.com/download/ws/    Release notes:    http://www.vmware.com/support/ws65/doc/releasenotes_ws653.html    For Windows    Workstation for Windows 32-bit and 64-bit    Windows 32-bit and 64-bit .exe    md5sum: 7565d16b7d7e0173b90c3b76ca4656bc    sha1sum: 9f687afd8b0f39cde40aeceb3213a91be487aad1    For Linux    Workstation for Linux 32-bit    Linux 32-bit .rpm    md5sum: 4d55c491bd008ded0ea19f373d1d1fd4    sha1sum: 1f43131c960e76a530390d3b6984c78dfc2da23e    Workstation for Linux 32-bit    Linux 32-bit .bundle    md5sum: d4a721c1918c0e8a87c6fa4bad49ad35    sha1sum: c0c6f9b56e70bd3ffdb5467ee176110e283a69e5    Workstation for Linux 64-bit    Linux 64-bit .rpm    md5sum: 72adfdb03de4959f044fcb983412ae7c    sha1sum: ba16163c8d9b5aa572526b34a7b63dc6e68f9bbb    Workstation for Linux 64-bit    Linux 64-bit .bundle    md5sum: 83e1f0c94d6974286256c4d3b559e854    sha1sum: 8763f250a3ac5fc4698bd26319b93fecb498d542 VMware Player 2.5.3    http://www.vmware.com/download/player/    Release notes:    http://www.vmware.com/support/player25/doc/releasenotes_player253.html    Player for Windows binary http://download3.vmware.com/software/vmplayer/VMware-player-2.5.3-185404.exe    md5sum: fe28f193374c9457752ee16cd6cad4e7    sha1sum: 13bd3ff93c04fa272544d3ef6de5ae746708af04    Player for Linux (.rpm) http://download3.vmware.com/software/vmplayer/VMware-Player-2.5.3-185404.i386.rpm    md5sum: c99cd65f19fdfc7651bcb7f328b73bc2    sha1sum: a33231b26e2358a72d16e1b4e2656a5873fe637e    Player for Linux (.bundle) http://download3.vmware.com/software/vmplayer/VMware-Player-2.5.3-185404.i386.bundle    md5sum: 210f4cb5615bd3b2171bc054b9b2bac5    sha1sum: 2f6497890b17b37480165bab9f430e8645edae9b    Player for Linux - 64-bit (.rpm) http://download3.vmware.com/software/vmplayer/VMware-Player-2.5.3-185404.x86_64.rpm    md5sum: f91576ef90b322d83225117ae9335968    sha1sum: f492fa9cf26ee2818f164aac04cde1680c25d974    Player for Linux - 64-bit (.bundle) http://download3.vmware.com/software/vmplayer/VMware-Player-2.5.3-185404.x86_64.bundle    md5sum: 595d44d7945c129b1aeb679d2f001b05    sha1sum: acd69fcb0c6bc49fd4af748c65c7fb730ab1e8c4 VMware ACE 2.5.3    http://www.vmware.com/download/ace/    Release notes:    http://www.vmware.com/support/ace25/doc/releasenotes_ace253.html    ACE Management Server Virtual Appliance    AMS Virtual Appliance .zip    md5sum: 44cc7b86353047f02cf6ea0653e38418    sha1sum: 9f44b15e6681a6e58dd20784f829c68091a62cd1    VMware ACE for Windows 32-bit and 64-bit    Windows 32-bit and 64-bit .exe    md5sum: 0779da73408c5e649e0fd1c62d23820f    sha1sum: 2b2e4963adc89f3b642874685f490222523b63ef    ACE Management Server for Windows    Windows .exe    md5sum: 0779da73408c5e649e0fd1c62d23820f    sha1sum: 2b2e4963adc89f3b642874685f490222523b63ef    ACE Management Server for SUSE Enterprise Linux 9    SLES 9 .rpm    md5sum: a4fc92d7197f0d569361cdf4b8cca642    sha1sum: af8a135cca398cacaa82c8c3c325011c6cd3ed75    ACE Management Server for Red Hat Enterprise Linux 4    RHEL 4 .rpm    md5sum: 841005151338c8b954f08d035815fd58    sha1sum: 67e48624dba20e6be9e41ec9a5aba407dd8cc01e CVE Information: CVE-2009-0199 CVE-2009-2628 -------------------------------------------------------------------------------------------------------------------------------- Evaluate your site's resistance to the installation of malicious code. Have it scanned for vulnerabilities. -  Comments: blog comments powered by Disqus	All Sections Security News Unix focus Exploits Tools Windows focus Security Reviews  Related Articles Novell Zenworks Software Packaging LaunchHelp.dll Code Execution Vulnerability Novell ZENWorks Software Packaging Antique ActiveX Control Code Execution Vulnerability Microsoft Internet Explorer swapNode Handling Code Execution Vulnerability Microsoft Internet Explorer Select Element Insufficient Type Checking Code Execution Vulnerability Internet Explorer Select Element Cache Code Execution Vulnerability Microsoft Office Graph DataFormat Signed Index Code Execution Vulnerability Microsoft Office Excel Conditional Expression Ptg Type Confusion Vulnerability Microsoft Internet Explorer Protected Mode Bypass Vulnerability Microsoft Internet Explorer 9 STYLE Object Parsing Code Execution Vulnerability Microsoft Internet Explorer XSLT SetViewSlave Code Execution Vulnerability CA Total Defense Suite Gateway Security Malformed HTTP Packet Code Execution Vulnerability HP Easy Printer Care XMLSimpleAccessor Class ActiveX Control Code Execution Vulnerability TrendMicro Control Manager CASProcessor.exe BLOB Code Execution Vulnerability Symantec Veritas Storage Foundation vxsvc.exe Unicode Code Execution Vulnerability HP iNode Management Center iNodeMngChecker.exe Code Execution Vulnerability  Featured Articles ProFTPD Response Pool Use-After-Free Code Execution Vulnerability HP Data Protector Notebook Extension LogClientInstallation SQL Injection Vulnerabilty GE Proficy Historian ihDataArchiver.exe Trusted Header Size Code Execution Vulnerability Novell ZENWorks Software Packaging Antique ActiveX Control Code Execution Vulnerability Adobe Reader U3D IFF RGBA Parsing Code Execution Vulnerability Adobe Reader U3D PCX Parsing Code Execution Vulnerability Cisco Unified Service Monitor brstart add_dm Code Execution Vulnerability
	Security News - Security Reviews - Exploits - Tools - UNIX Focus - Windows Focus - Blogs - CVEs

Copyright © 1998-2011 Beyond Security® All rights reserved.
Terms of Use Site Privacy Statement.
SecuriTeam™ is a trademark of Beyond Security®