Heap-Overflow Exploit in VMware CD-ROM Emulation Leads to RCE
VMware ESXi (versions 7.0, 6.7 before ESXi670-202111101-SG, and 6.5 before ESXi650-202110101-SG), VMware Workstation (version 16.2.0), and VMware Fusion (version 12.2.0) have a heap-overflow vulnerability in the CD-ROM device emulation. A malicious actor who can access a virtual machine with CD-ROM device emulation could exploit this vulnerability, along with other issues, to run code on the hypervisor from the virtual machine.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
vmware cloud foundation |
||
vmware workstation |
||
vmware fusion |
||
vmware esxi 6.5 |
||
vmware esxi 6.7 |
||
vmware esxi 7.0 |
Vulmon