CVE-2016-7083

HIGH

Vmware Workstation Player - Memory Corruption

Title source: rule
STIX 2.1

Description

VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows, when Cortado ThinPrint virtual printing is enabled, allow guest OS users to execute arbitrary code on the host OS or cause a denial of service (host OS memory corruption) via TrueType fonts embedded in EMFSPOOL.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Google Security Research · textdoswindows
https://www.exploit-db.com/exploits/40398

References (4)

Core 4
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1036805
Exploit, Third Party Advisory exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/40398/
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/92934

Scores

CVSS v3 7.8
EPSS 0.0035
EPSS Percentile 57.1%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Details

CWE
CWE-119
Status published
Products (8)
vmware/workstation_player 12.0.0
vmware/workstation_player 12.0.1
vmware/workstation_player 12.1.0
vmware/workstation_player 12.1.1
vmware/workstation_pro 12.0.0
vmware/workstation_pro 12.0.1
vmware/workstation_pro 12.1.0
vmware/workstation_pro 12.1.1
Published Dec 29, 2016
Tracked Since Feb 18, 2026