| Package | Affected versions | Patched versions |
|---|---|---|
| ovf tool | = 2.1 | |
| player | = 4.0= 4.0.0.18997= 4.0.1= 4.0.2= 4.0.3= 4.0.4 | |
| workstation | = 8.0= 8.0.0.18997= 8.0.1= 8.0.1.27038= 8.0.2= 8.0.3= 8.0.4 |
Format string vulnerability in VMware OVF Tool 2.1 on Windows, as used in VMware Workstation 8.x before 8.0.5, VMware Player 4.x before 4.0.5, and other products, allows user-assisted remote attackers to execute arbitrary code via a crafted OVF file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free