Workstation for Windows 32-bit and 64-bit VMware Workstation Movie Decoder stand alone Please review the patch/release notes for your product and versionĪnd verify the md5sum and/or the sha1sum of your downloaded file. Player 2.5.x Windows 2.5.3 build 185404 or later Workstation 6.5.x Windows 6.5.3 build 185404 or later Movie Decoder any Windows 6.5.3 Build 185404 or later To remediate the above issues either install the stand alone movieĭecoder or update your product using the table below. The Common Vulnerabilities and Exposures project () Will Dormann of the CERT/CC for reporting these issues and working VMware would like to thank Alin Rad Pop of Secunia Research and Visiting a malicious web page or opening a malicious video file onĪ system that has the vulnerable version of the VMnc codec installed. Heap-based buffer overflows via specially crafted video filesĬontaining incorrect framebuffer parameters.įor an attack to be successful the user must be tricked into

Several vulnerabilities in the VMnc codec can be exploited to cause Player and VMware ACE, or can be downloaded as a stand alone

Movie decoder is installed as part of VMware Workstation, VMware VMware Player and VMware ACE, in any compatible media player. Required to play back movies recorded with VMware Workstation, The VMware movie decoder contains the VMnc media codec that is Several security issues resolved with the latest VMnc codec. VMware Workstation Movie Decoder stand alone 6.5.2 and earlier. Several security issues are resolved with the latest VMnc codec.

Updated on: (initial release of advisory) Player, and VMware ACE resolve security issues. Synopsis: VMware Movie Decoder, VMware Workstation, VMware

Next message: VMSA-2009-0013 VMware Fusion resolves two security issues.Previous message: VMSA-2009-0011 VMware Studio 2.0 addresses a security issue in the public beta version of Studio 2.0.VMware Security Announcements security-announce at VMSA-2009-0012 VMware Movie Decoder, VMware Workstation, VMware Player, and VMware ACE resolve security issues.

Ace player for mac os