VMware patches vulnerabilities in its products
Virtualisation specialist VMware has released security updates for a number of its products, closing a total of ten security vulnerabilities. The security holes include heap overflows, format string issues, privilege escalation and denial of service exploits – some of which can be exploited remotely.
According to the company, VMware Workstation, VMware Player, VMware ACE, VMware Server, VMware Fusion, VMware VIX API 1.6.x for Windows, VMware ESX and ESXi are all affected, although in some cases, only the Windows versions. Details of the affected versions can be found in the security advisory below.
See also:
- VMSA-2010-0007 VMware hosted products, vCenter Server and ESX patches resolve multiple security issues, security advisory from VMware.
(crve)