NewImage

VMware have released a maintenance release for the Mac version of Fusion. There are no major changes to this version but it does resolve an issue with Mountain Lion.

Details from VMware:

Resolved Issues

This release resolves the following issues.

General Issues

  • Resolved an intermittent issue with an unreleased version of Mac OS X.
  • Fixed a race-condition when starting VMware Tools in some OpenSUSE virtual machines.

Security Issues

  • VMware host Checkpoint file memory corruption
    Input data was not properly validated when loading Checkpoint files. This issue could have allowed an attacker with the ability to load a specially crafted Checkpoint file to execute arbitrary code on the host. 
    The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2012-3288 to this issue.
  • VMware floppy device out-of-bounds memory write. 
    Due to a flaw in the virtual floppy configuration, it was possible to perform an out-of-bounds memory write. This vulnerability could have allowed a guest user to crash the VMX process or to potentially execute code on the host.
    The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2012-2449 to this issue.

VMware Security Advisory VMSA-2012-0009 and VMware Security Advisory VMSA-2012-0011 document workarounds and mitigation for these resolved issues.

 

 

 

Leave a Reply