Stack-Based Buffer Overflow in VMware Workstation and Fusion

Executive Summary

This is a stack-based buffer-overflow vulnerability in VMware Workstation and Fusion's HGFS component. A local attacker with admin rights on a virtual machine could exploit it to run code as the VMX process on the host system.

Useful 0 Not Useful 0

Detection Guidance

This vulnerability requires local administrative privileges on a virtual machine to exploit. Detection involves checking VMware Workstation or Fusion versions against affected releases (25H2, 26H1). Use commands like 'vmware -v' or check installed package versions to verify if your system is vulnerable.

Useful 0 Not Useful 0

Impact Analysis

If exploited, an attacker could gain control over the host system by executing arbitrary code through the vulnerable VMX process. This requires local admin access on the guest VM but could lead to full host compromise.

Useful 0 Not Useful 0

Mitigation Strategies

Apply the vendor-provided updates to VMware Workstation 26H1u1 or Fusion 26H1u1. If updates are unavailable, restrict local administrative access to virtual machines or disable HGFS functionality as a temporary workaround.

Useful 0 Not Useful 0