VMware heeft versie 12.5.5 van Workstation Player uitgebracht. Player is gratis software waarmee virtuele machines kunnen worden gemaakt en gedraaid. Voor commercieel gebruik wordt echter wel een vergoeding gevraagd. Het is simpel gezegd een vereenvoudigde uitvoering van andere VMware-producten, zoals Workstation Pro, Server en ESX Server. Ook de virtual machines van Microsoft Virtual PC en Symantec LiveState Recovery-disks worden ondersteund. Daarnaast kunnen verschillende voorgeïnstalleerde virtual machines via deze pagina worden binnengehaald, zoals Debian, Ubuntu en Fedora. In deze uitgave zijn die beveiligingsproblemen verholpen en fout in de VMware Tools.
This release of VMware Workstation Player addresses the following issues:Resolved Issues
- VMware Workstation Player has a heap buffer overflow and uninitialized stack memory usage in SVGA. These issues might allow a guest virtual machine to execute code on the host.
The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the identifiers CVE-2017-4902 (heap issue) and CVE-2017-4903 (stack issue) to these issues.- The VMware Workstation Player XHCI driver has uninitialized memory usage. This issue might allow a guest virtual machine to execute code on the host.
The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the identifier CVE-2017-4904 to this issue.- VMware Workstation Player has uninitialized memory usage. This issue might lead to an information leak.
The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the identifier CVE-2017-4905 to this issue.
- After you install VMware Tools on a 64-bit Windows virtual machine, when the virtual machine boots up, the system might display the following error:
VMware Tools unrecoverable error: (vthread-4)
Exception 0xc0000005 (access violation) has occurred.
This issue is resolved.