# MA-492.072015: MyCERT Advisory - VMware Releases Security Advisory

**Date:** 12 Jul 2015  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-492.072015  
**Advisory ID:** MA-492.072015

---

#### **1.0 Introduction**
VMware has released security updates to address a host privilege escalation vulnerability in VMware Workstation, Player and Horizon View Client for Windows.  
Users and administrators are encouraged to review the VMware Security Advisory VMSA-2015-0005 and apply the necessary updates.
**2.0 Impact**
Exploitation of some of these vulnerabilities may allow an attacker to escalate privileges on an affected VMware system.
**3.0 Affected Products**
Updates are available include:
• VMware Workstation 11.1.1
• VMware Workstation 10.0.7
• VMware Player 7.1.1
• VMware Player 6.0.7
• VMware Horizon Client for Windows (with Local Mode Option) 5.4.2
**4.0 Recommendation**
Users are advised to review the patch and release notes for the affected products listed below and verify the checksum of the download file.
4.1 VMware Workstation 11.1.1, 10.0.7
Downloads and Documentation:
<https://www.vmware.com/go/downloadworkstation>
4.2 VMware Player 7.1.1, 6.0.7
Downloads and Documentation:
<https://www.vmware.com/go/downloadplayer>
4.3 VMware Horizon Clients 5.4.2
Downloads and Documentation:
<https://www.vmware.com/go/viewclients>
Generally, MyCERT advises the users of this software to be updated with the latest security announcements by the vendor and follow best practice security policies to determine which updates should be applied.
For further enquiries, please contact MyCERT through the following channels:
E-mail : [[email protected]](http://10.0.2.129:9000/cms/cyber999@cybersecurity.my) or [[email protected]](http://10.0.2.129:9000/cms/mycert@mycert.org.my)
Phone : 1-300-88-2999 (monitored during business hours)
Fax : +603 89453442
Handphone : +60 19 2665850 (24x7 call incident reporting)
SMS : CYBER999 REPORT EMAIL COMPLAINT to 15888
Business Hours : Mon - Fri 09:00 AM - 18:00 PM MYT
Web : <https://www.mycert.org.my>
Twitter : <http://www.twitter.com/mycert>
Facebook: <http://www.facebook.com/mycert.org.my>
Cyber999 Mobile Apps:  IOS Users or Android Users
**5.0 References**
• VMware Releases Security Advisory : <https://www.us-cert.gov/ncas/current-activity/2015/07/10/VMware-Releases-Security-Advisory>
• VMware Workstation, Player and Horizon View Client for Windows updates address a host privilege escalation vulnerability : <http://www.vmware.com/security/advisories/VMSA-2015-0005.html#sthash.gJg8RG2i.dpuf>