# MA-554.012016: MyCERT Advisory - VMware Releases Security Updates

**Date:** 11 Jan 2016  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-554.012016  
**Advisory ID:** MA-554.012016

---

####
**1.0 Introduction**
VMware has released security updates to address a vulnerability in VMware ESXi, Fusion, Player, and Workstation.  Users and administrators are encouraged to review VMware Security Advisory VMSA-2016-0001 and apply the necessary updates.
**2.0 Impact**
Exploitation of some of these vulnerabilities may allow an attacker to escalate privileges on an affected VMware system. A kernel memory corruption vulnerability is present in the VMware Tools "Shared Folders" (HGFS) feature running on Microsoft Windows. Successful exploitation of this issue could lead to an escalation of privilege in the guest operating system.
**3.0 Affected Products**
The affected products is including of:
- VMware ESXi 6.0 without patch ESXi600-201512102-SG
- VMware ESXi 5.5 without patch ESXi550-201512102-SG
- VMware ESXi 5.1 without patch ESXi510-201510102-SG
- VMware ESXi 5.0 without patch ESXi500-201510102-SG
- VMware Workstation prior to 11.1.2
- VMware Player prior to 7.1.2
- VMware Fusion prior to 7.1.2
**4.0 Recommendation**
Users are advised to review the patch and release notes for the affected products listed below and verify the checksum of the download file.
> 4.1 VMware ESXi 6.0
> Downloads:
> <https://www.vmware.com/patchmgr/findPatch.portal>
> Documentation:
> <http://kb.vmware.com/kb/2135123>
>
> 4.2 VMware ESXi 5.5
> Downloads:
> <https://www.vmware.com/patchmgr/findPatch.portal>
> Documentation:
> <http://kb.vmware.com/kb/2135796>
>
> 4.3 VMware ESXi 5.1
> Downloads:
> <https://www.vmware.com/patchmgr/findPatch.portal>
> Documentation:
> <http://kb.vmware.com/kb/2126488>
>
> 4.4 VMware ESXi 5.0
> Downloads:
> <https://www.vmware.com/patchmgr/findPatch.portal>
> Documentation:
> <http://kb.vmware.com/kb/2120210>
>
> 4.5 VMware Workstation 11.1.2
> Downloads and Documentation:
> <https://www.vmware.com/go/downloadworkstation>
>
> 4.6 VMware Player 7.1.2
> Downloads and Documentation:
> <https://www.vmware.com/go/downloadplayer>
>
> 4.7 VMware Fusion 7.1.2
> <https://www.vmware.com/go/downloadfusion>
>
> 4.8 VMware Tools 10.0.0
> Downloads:
> <https://my.vmware.com/web/vmware/details?downloadGroup=VMTOOLS1000&productId=491>
> Documentation:
> <https://pubs.vmware.com/Release_Notes/en/vmwaretools/1000/vmware-tools-1000-release-notes.html>
>
> 4.9 For the workaround, removing the "Shared Folders" (HGFS) feature from previously installed VMware Tools will remove the possibility of exploitation.
Generally, MyCERT advises the users of this software to be updated with the latest security announcements by the vendor and follow best practice security policies to determine which updates should be applied.
For further enquiries, please contact MyCERT through the following channels:
E-mail : [[email protected]](/cdn-cgi/l/email-protection#88ebf1eaedfab1b1b1c8ebf1eaedfafbedebfdfae1fcf1a6e5f1) or [[email protected]](/cdn-cgi/l/email-protection#b0ddc9d3d5c2c4f0ddc9d3d5c2c49edfc2d79eddc9) 
Phone : 1-300-88-2999 (monitored during business hours)
Fax : +603 89453442 
Handphone : +60 19 2665850 (24x7 call incident reporting)
SMS : CYBER999 REPORT EMAIL COMPLAINT to 15888
Business Hours : Mon - Fri 09:00 AM - 18:00 PM MYT
Web : [https://www.mycert.org.my](https://www.mycert.org.my/)
Twitter : <http://www.twitter.com/mycert>
Facebook: <http://www.facebook.com/mycert.org.my>
Cyber999 Mobile Apps:  [IOS Users](https://itunes.apple.com/my/app/cyber999-mobile-application/id888552400?mt=8&ign-mpt=uo%3D4) or [Android Users](https://play.google.com/store/apps/details?id=my.cyber999.mobile)
**5.0 References**
- VMware Releases Security Updates: <https://www.us-cert.gov/ncas/current-activity/2016/01/08/VMware-Releases-Security-Updates>
- VMware Workstation, Player and Horizon View Client for Windows updates address a host privilege escalation vulnerability : <http://www.vmware.com/security/advisories/VMSA-2016-0001.html>
- ESB-2016.0041 - [Win][UNIX/Linux][Virtual] VMware ESXi, Workstation, Player, and Fusion: Increased privileges - Existing account:
<https://www.auscert.org.au/render.html?it=29702>