Vulnerability in Microsoft Windows
CVE-2015-2338
TPview.dll in VMware Workstation 10.x before 10.0.6 and 11.x before 11.1.1, VMware Player 6.x before 6.0.6 and 7.x before 7.1.1, and VMware Horizon Client 3.2.x before 3.2.1, 3.3.x, and 5.x local-mode before 5.4.2 on Windows does not properly allocate memory, which allows guest OS users to cause a host OS denial of service via unspecified vectors, a different vulnerability than CVE-2015-2339.
EPSS: 0.007 (49.2th percentile) — read the EPSS interpretation.
Affected products
- Microsoft Windows
- Vmware Fusion — versions 6.0, 6.0.1, 6.0.2
- Vmware Horizon_client — versions 3.2.0, 3.3
- Vmware Horizon_view_client — versions 5.4, 5.4.1
- Vmware Player — versions 6.0, 6.0.1, 6.0.2
- Vmware Workstation — versions 10.0, 10.0.1, 10.0.2
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (x_refsource_CONFIRM, Patch, Vendor Advisory)
- cve@mitre.org (vdb-entry, x_refsource_SECTRACK)