Home > Security News > Security update fixes flaws in VMware Workstation
Security News:
EMAIL THIS

Security update fixes flaws in VMware Workstation

By SearchSecurity.com Staff
20 Sep 2007 | SearchSecurity.com

Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   

Attackers could exploit several security flaws in VMware Workstation to run malicious code on targeted systems, but VMware has addressed the problems with the release of Workstation 6.0.1.

VMware Workstation is a popular operating system virtualization application available for Linux and Microsoft Windows. According to the VMware advisory, Workstation's DHCP server is prone to multiple remote code-execution issues including a stack-based buffer-overflow vulnerability when handling a malformed DHCP packet; and a stack-based integer-underflow vulnerability when handling a malformed DHCP packet.

An attacker can exploit these issues to execute arbitrary code with the privileges of the user running the affected application.

VMware Workstation versions prior to 6.0.1 Build 55017 are vulnerable.



Tags: Virtualization Security Issues and ThreatsVIEW ALL TAGS

Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   



RELATED CONTENT
Virtualization Security Issues and Threats
Cloud computing data security starts with internal strategy, experts say
PCI virtualization SIG closer to proposing changes to standard
Security challenges with cloud computing services
Secure virtual desktop software enables remote client security
Security threats to virtual environments less theoretical, more practical
At VMworld 2009, companies focus on virtual desktops for security
Security fundamentals remain focus of virtualization deployments
How to implement virtual firewalls in a complex network infrastructure
How to find virtual machines for greater virtualization compliance
Quiz: Virtualization and compliance

RELATED RESOURCES
2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems
Search Bitpipe.com for the latest white papers and business webcasts
Whatis.com, the online computer dictionary



More Tips to Secure Your Network
TechTarget Security Media
Information Security View this month\\'s issue and subscribe today.
Information Security Decisions Apply online for free conference admission.
SearchSecurity.com
HomeNewsMagazineMultimediaWhite PapersLearningAdviceTopicsEventsAbout Us

About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
TechTarget provides technology professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective purchase decisions and managing their organizations' technology projects - with its network of technology-specific websites, events and online magazines.

TechTarget Corporate Web Site  |  Media Kits  |  Site Map




All Rights Reserved, Copyright 2003 - 2009, TechTarget | Read our Privacy Policy
  TechTarget - The IT Media ROI Experts