Visit our newest sister site!
Hundreds of free aircraft flight manuals
Civilian • Historical • Military • Declassified • FREE!


TUCoPS :: VMWare :: b06-4281.htm

VMware 5.5.1 for Windows arbitrary partition table delete issue.



: VMware 5.5.1 for Windows arbitrary partition table delete issue.
: VMware 5.5.1 for Windows arbitrary partition table delete issue.



Advisory ID:
XSec-06-05

Advisory Name:
VMware 5.5.1 for Windows arbitrary partition table delete issue.

Release Date:
08/16/2006

Tested on:
VMware 5.5.1 build-19175 on Windows Server 2000/2003

Affected version:
VMware 5.5.1

Author:
nop 
http://www.xsec.org 

Overview:
On running windows system, you can't delete, format and change system
dirver. \
VMware register a COM Object use for Virtual Disk, but it's very danger. \
I don't know how to name this issue. If you allow unsafe ActiveX and
jscript, \
and has VMware installed, the vmware.htm will delete all harddisk
partition \
table on the windows system. please backup your partition table first.

Exploit:

=============== vmware.htm start ===============



 



=============== vmware.htm end =================
Link:
http://www.xsec.org/index.php?module=Releases&act=view&type=1&id=13 


About XSec:
We are redhat.




TUCoPS is optimized to look best in Firefox® on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2014 AOH