Integer overflow in the vmx86 kernel extension in VMware Fusion before 2.0.6 build 196839 allows host OS users to cause a denial of service to the host OS via unspecified vectors.
http://www.vupen.com/english/advisories/2009/2811
http://www.vmware.com/security/advisories/VMSA-2009-0013.html
http://securitytracker.com/id?1022981
http://secunia.com/advisories/36928
http://lists.vmware.com/pipermail/security-announce/2009/000066.html