TPInt.dll in VMware Workstation 10.x before 10.0.6 and 11.x before 11.1.1, VMware Player 6.x before 6.0.6 and 7.x before 7.1.1, and VMware Horizon Client 3.2.x before 3.2.1, 3.3.x, and 5.x local-mode before 5.4.2 on Windows does not properly allocate memory, which allows guest OS users to execute arbitrary code on the host OS via unspecified vectors.

The version of VMware Workstation installed on the remote Windows host is 10.x prior to 10.0.6 or 11.x prior to 11.1.1. It is, therefore, affected by multiple vulnerabilities :

  - An arbitrary code execution vulnerability exists due to     a stack-based buffer overflow condition in the JPEG2000     plugin that is triggered when parsing a Quantization     Default (QCD) marker segment in a JPEG2000 (JP2) image     file. A remote attacker can exploit this, using a     specially crafted image, to execute arbitrary code or     cause a denial of service condition. (CVE-2012-0897)

  - Multiple unspecified remote code execution     vulnerabilities exists in 'TPView.dll' and 'TPInt.dll'     library files. (CVE-2015-2336, CVE-2015-2337)

  - The 'TPview.dll' and 'TPInt.dll' library files fail to     properly handle memory allocation. A remote attacker can     exploit this to cause a denial of service.
    (CVE-2015-2338, CVE-2015-2339, CVE-2015-2340)

The version of VMware Player installed on the remote Windows host is 7.x prior to 7.1.1. It is, therefore, affected by multiple vulnerabilities :

  - An arbitrary code execution vulnerability exists due to     a stack-based buffer overflow condition in the JPEG2000     plugin that is triggered when parsing a Quantization     Default (QCD) marker segment in a JPEG2000 (JP2) image     file. A remote attacker can exploit this, using a     specially crafted image, to execute arbitrary code or     cause a denial of service condition. (CVE-2012-0897)

  - Multiple unspecified remote code execution     vulnerabilities exists in 'TPView.dll' and 'TPInt.dll'     library files. (CVE-2015-2336, CVE-2015-2337)

  - The 'TPview.dll' and 'TPInt.dll' library files fail to     properly handle memory allocation. A remote attacker can     exploit this to cause a denial of service.
    (CVE-2015-2338, CVE-2015-2339, CVE-2015-2340)

The version of VMware Player installed on the remote Windows host is 6.x prior to 6.0.6. It is, therefore, affected by multiple vulnerabilities :

  - An arbitrary code execution vulnerability exists due to     a stack-based buffer overflow condition in the JPEG2000     plugin that is triggered when parsing a Quantization     Default (QCD) marker segment in a JPEG2000 (JP2) image     file. A remote attacker can exploit this, using a     specially crafted image, to execute arbitrary code or     cause a denial of service condition. (CVE-2012-0897)

  - Multiple unspecified remote code execution     vulnerabilities exists in 'TPView.dll' and 'TPInt.dll'     library files. (CVE-2015-2336, CVE-2015-2337)

  - The 'TPview.dll' and 'TPInt.dll' library files fail to     properly handle memory allocation. A remote attacker can     exploit this to cause a denial of service.
    (CVE-2015-2338, CVE-2015-2339, CVE-2015-2340)

  - A denial of service vulnerability exists due to improper     validation of user-supplied input to a remote procedure     call (RPC) command. An unauthenticated, remote attacker     can exploit this, via a crafted command, to crash the     host or guest operating systems. (CVE-2015-2341)

The version of VMware Horizon View Client installed on the remote host is 3.2.x prior to 3.2.1, 3.3.x prior to 3.4.0, or 5.x (with local mode) prior to 5.4.2. It is, therefore, affected by multiple vulnerabilities :

  - An arbitrary code execution vulnerability exists due to     a stack-based buffer overflow condition in the JPEG2000     plugin that is triggered when parsing a Quantization     Default (QCD) marker segment in a JPEG2000 (JP2) image     file. A remote attacker can exploit this, using a     specially crafted image, to execute arbitrary code or     cause a denial of service condition. (CVE-2012-0897)

  - Multiple denial of service vulnerabilities exist due to     improper memory allocation by the TPView.dll and     TPInt.dll libraries. A remote attacker can exploit this     to cause a denial of service condition. (CVE-2015-2338,     CVE-2015-2339, CVE-2015-2340)

  - Multiple remote code execution vulnerabilities exist due     to improper memory allocation by the TPView.dll and     TPInt.dll libraries. A remote attacker can exploit this     to execute arbitrary code. (CVE-2015-2336,     CVE-2015-2337)

ID	Name	Product	Family	Severity
84223	VMware Workstation 10.x < 10.0.6 / 11.x < 11.1.1 Multiple Vulnerabilities (VMSA-2015-0004) (Windows)	Nessus	Windows	medium
84220	VMware Player 7.x < 7.1.1 Multiple Vulnerabilities (VMSA-2015-0004)	Nessus	Windows	medium
84219	VMware Player 6.x < 6.0.6 Multiple Vulnerabilities (VMSA-2015-0004)	Nessus	Windows	medium
84150	VMware Horizon View Client 3.2.x < 3.2.1 / 3.3.x < 3.4.0 / or 5.x < 5.4.2 Multiple Vulnerabilities (VMSA-2015-0004)	Nessus	Windows	medium

Detections

Analytics

CVE-2015-2337

high

Tenable Plugins

medium

medium

medium

medium