CVE-2016-7461: VMware Workstation and Fusion updates address critical out-of-bounds memory access vulnerability, (Mon, Nov 14th)

VMWare published today advisory VMSA-2016-0019 affecting products VMware Workstation Pro / Player and VMware Fusion Pro / Fusion. The issue is located in the drag and drop feature, which is affected by an out-of-bounds memory access vulnerability.

We have not seen yet any active exploiting for this CVE. If you see something, please share it with us by our contact form.

More information at http://www.vmware.com/security/advisories/VMSA-2016-0019.html

Manuel Humberto Santander Pelez
SANS Internet Storm Center - Handler
Twitter: @manuelsantander
Web:http://manuel.santander.name
e-mail: msantand at isc dot sans dot org

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.