player vulnerabilities and fixes

Recent CVEs affecting player, with upgrade or downgrade steps. 26 tracked.

player has 26 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 1. Most recent: 2016-05-18. Highest priority: CVE-2016-2077 (score 59/100).

• CVE-2016-2077 CRITICAL 9.8 DOWNGRADE DOWNGRADE VMware Workstation 11.x before 11.1.3 and VMware Player 7.x before 7.1.3 on Windows incorrectly access an exec
• CVE-2015-6933 MEDIUM 6.3 DOWNGRADE DOWNGRADE The VMware Tools HGFS (aka Shared Folders) implementation in VMware Workstation 11.x before 11.1.2, VMware Pla
• CVE-2015-3650 HIGH 7.2 DOWNGRADE DOWNGRADE vmware-vmx.exe in VMware Workstation 7.x through 10.x before 10.0.7 and 11.x before 11.1.1, VMware Player 5.x
• CVE-2015-2341 HIGH 7.8 DOWNGRADE DOWNGRADE VMware Workstation 10.x before 10.0.5, VMware Player 6.x before 6.0.6, and VMware Fusion 6.x before 6.0.6 and
• CVE-2015-2340 MEDIUM 6.1 DOWNGRADE DOWNGRADE TPInt.dll in VMware Workstation 10.x before 10.0.6 and 11.x before 11.1.1, VMware Player 6.x before 6.0.6 and
• CVE-2015-2339 MEDIUM 6.1 DOWNGRADE DOWNGRADE TPview.dll in VMware Workstation 10.x before 10.0.6 and 11.x before 11.1.1, VMware Player 6.x before 6.0.6 and
• CVE-2015-2338 MEDIUM 6.1 DOWNGRADE DOWNGRADE TPview.dll in VMware Workstation 10.x before 10.0.6 and 11.x before 11.1.1, VMware Player 6.x before 6.0.6 and
• CVE-2015-2337 MEDIUM 5.8 DOWNGRADE DOWNGRADE TPInt.dll in VMware Workstation 10.x before 10.0.6 and 11.x before 11.1.1, VMware Player 6.x before 6.0.6 and
• CVE-2015-2336 MEDIUM 5.8 DOWNGRADE DOWNGRADE TPView.dll in VMware Workstation 10.x before 10.0.6 and 11.x before 11.1.1, VMware Player 6.x before 6.0.6 and
• CVE-2015-1044 LOW 3.3 DOWNGRADE MITIGATE vmware-authd (aka the Authorization process) in VMware Workstation 10.x before 10.0.5, VMware Player 6.x befor
• CVE-2015-1043 LOW 3.3 DOWNGRADE DOWNGRADE The Host Guest File System (HGFS) in VMware Workstation 10.x before 10.0.5, VMware Player 6.x before 6.0.5, an
• CVE-2014-8370 MEDIUM 6.4 DOWNGRADE DOWNGRADE VMware Workstation 10.x before 10.0.5, VMware Player 6.x before 6.0.5, VMware Fusion 6.x before 6.0.5, and VMw
• CVE-2014-3793 MEDIUM 5.8 DOWNGRADE DOWNGRADE VMware Tools in VMware Workstation 10.x before 10.0.2, VMware Player 6.x before 6.0.2, VMware Fusion 6.x befor
• CVE-2014-2384 MEDIUM 4.9 DOWNGRADE DOWNGRADE vmx86.sys in VMware Workstation 10.0.1 build 1379776 and VMware Player 6.0.1 build 1379776 on Windows might al
• CVE-2014-1208 LOW 3.3 MITIGATE DOWNGRADE VMware Workstation 9.x before 9.0.1, VMware Player 5.x before 5.0.1, VMware Fusion 5.x before 5.0.1, VMware ES
• CVE-2014-10024 HIGH 7.5 MITIGATE MITIGATE Multiple integer signedness errors in DirectShowDemuxFilter, as used in Divx Web Player, Divx Player, and othe
• CVE-2013-5972 HIGH 7.2 DOWNGRADE DOWNGRADE VMware Workstation 9.x before 9.0.3 and VMware Player 5.x before 5.0.3 on Linux do not properly handle shared
• CVE-2013-3519 HIGH 7.9 MITIGATE DOWNGRADE lgtosync.sys in VMware Workstation 9.x before 9.0.3, VMware Player 5.x before 5.0.3, VMware Fusion 5.x before
• CVE-2013-1662 MEDIUM 6.9 DOWNGRADE DOWNGRADE vmware-mount in VMware Workstation 8.x and 9.x and VMware Player 4.x and 5.x, on systems based on Debian GNU/L
• CVE-2012-3289 HIGH 7.8 DOWNGRADE DOWNGRADE VMware Workstation 8.x before 8.0.4, VMware Player 4.x before 4.0.4, VMware ESXi 3.5 through 5.0, and VMware E
• CVE-2012-3288 HIGH 9.3 DOWNGRADE DOWNGRADE VMware Workstation 7.x before 7.1.6 and 8.x before 8.0.4, VMware Player 3.x before 3.1.6 and 4.x before 4.0.4,
• CVE-2012-2450 HIGH 9.0 DOWNGRADE DOWNGRADE VMware Workstation 8.x before 8.0.3, VMware Player 4.x before 4.0.3, VMware Fusion 4.x before 4.1.2, VMware ES
• CVE-2012-2449 HIGH 9.0 DOWNGRADE DOWNGRADE VMware Workstation 8.x before 8.0.3, VMware Player 4.x before 4.0.3, VMware Fusion 4.x through 4.1.2, VMware E
• CVE-2012-1666 MEDIUM 6.9 UPGRADE UPGRADE Untrusted search path vulnerability in VMware Tools in VMware Workstation before 8.0.4, VMware Player before 4
• CVE-2012-1518 HIGH 8.3 DOWNGRADE DOWNGRADE VMware Workstation 8.x before 8.0.2, VMware Player 4.x before 4.0.2, VMware Fusion 4.x before 4.1.2, VMware ES
• CVE-2011-3868 HIGH 9.3 DOWNGRADE DOWNGRADE Buffer overflow in VMware Workstation 7.x before 7.1.5, VMware Player 3.x before 3.1.5, VMware Fusion 3.1.x be

FAQ

How do I fix player vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is player being exploited right now?

None of the tracked player CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which player CVE should I patch first?

CVE-2016-2077 currently ranks highest (59/100): VMware Workstation 11.x before 11.1.3 and VMware Player 7.x before 7.1.3 on Windows incorrectly access an exec.

RSS feed for player · ← Back to latest CVEs