# MA-484.062015: MyCERT Advisory - VMWare Releases Security Updates for Multiple Products

**Date:** 16 Jun 2015  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-484.062015  
**Advisory ID:** MA-484.062015

---

#### **1.0 Introduction**
VMWare has released four updates to address vulnerabilities in VMWare Workstation, Player, Fusion, and Horizon Client.
**2.0 Impact**
Exploitation of some of these vulnerabilities could allow denial-of-service condition or remote code execution on the Windows OS running these programs.
**3.0 Affected Products**
Listed below are the vulnerabilities and its respective affected product versions:
3.1 VMware Workstation and Horizon Client memory manipulation issues – this  vulnerability impacts the below product versions running on Windows:
- Workstation 10.x, 11.x
- Player 6.x, 7.x
- Horizon Client 3.2.x, 3.3.x
- Horizon Client for Windows (with local mode) 5.x
3.2 VMware Workstation, Player, and Fusion Denial of Service vulnerability – this vulnerability impacts the product versions running on any platform:
- Workstation 10.x, 11.x
- Player 6.x, 7.x
- Fusion 6.x, 7.x (OSX only)
**4.0 Recommendation**
Users are advised to review the patch and release notes for the affected products listed below and verify the checksum of the download file.
4.1 VMware Workstation 11.1.1, 10.0.6
Downloads and Documentation:
<https://www.vmware.com/go/downloadworkstation>
4.2 VMware Player 7.1.1, 6.0.6
Downloads and Documentation:
<https://www.vmware.com/go/downloadplayer>
4.3 VMware Fusion 7.0.1, 6.0.6
<https://www.vmware.com/go/downloadfusion>
4.4 VMware Horizon Clients 5.4.2, 3.4.0, and 3.2.1
Downloads and Documentation:
<https://www.vmware.com/go/viewclients>
Generally, MyCERT advises the users of this software to be updated with the latest security announcements by the vendor and follow best practice security policies to determine which updates should be applied.
For further enquiries, please contact MyCERT through the following channels:
E-mail : [[email protected]](/cdn-cgi/l/email-protection#82e1fbe0e7f0bbbbbbc2e1fbe0e7f0f1e7e1f7f0ebf6fbaceffb) or [[email protected]](/cdn-cgi/l/email-protection#b9d4c0dadccbcdf9d4c0dadccbcd97d6cbde97d4c0) 
Phone : 1-300-88-2999 (monitored during business hours)
Fax : +603 89453442 
Handphone : +60 19 2665850 (24x7 call incident reporting)
SMS : CYBER999 REPORT EMAIL COMPLAINT to 15888
Business Hours : Mon - Fri 09:00 AM - 18:00 PM MYT
Web : [https://www.mycert.org.my](https://www.mycert.org.my/)
Twitter : <http://www.twitter.com/mycert>
Facebook: <http://www.facebook.com/mycert.org.my>
Cyber999 Mobile Apps:  [IOS Users](https://itunes.apple.com/my/app/cyber999-mobile-application/id888552400?mt=8&ign-mpt=uo%3D4) or [Android Users](https://play.google.com/store/apps/details?id=my.cyber999.mobile)
**5.0References**
- US-CERT: VMWare Releases Security Updates for Multiple Products.
<https://www.us-cert.gov/ncas/current-activity/2015/06/09/VMWare-Releases-Security-Updates-Multiple-Products>
- VMware Security Advisories.
<http://www.vmware.com/security/advisories/VMSA-2015-0004.html>