Arbitrary Code Execution via Crafted UDF Filesystem in VMware Products

CVE-2011-3868 · HIGH Severity

AV:N/AC:M/AU:N/C:C/I:C/A:C

Buffer overflow in VMware Workstation 7.x before 7.1.5, VMware Player 3.x before 3.1.5, VMware Fusion 3.1.x before 3.1.3, and VMware AMS allows remote attackers to execute arbitrary code via a crafted UDF filesystem in an ISO image.

Learn more about our Cis Benchmark Audit For Vmware.