VMware Player 2.0.1 Build 55017
Mit dem VMware Player können Sie mit VMware erstellte virtuelle Maschinen starten, benutzen, Inhalte verändern, pausieren und beenden. Hardware-Komponenten wie Laufwerke, Sound, Netzwerk, USB-Geräte usw. können aktiviert und deaktiviert werden. Ebenso kann der Speicherbedarf eingestellt werden.
Zitat von http://www.vmware.com/
VMware Player 2.0.1 addresses the following security issues:
- This release fixes several security vulnerabilities in the VMware DHCP server that could enable a malicious web page to gain system-level privileges.
Thanks to Neel Mehta and Ryan Smith of the IBM Internet Security Systems X-Force for discovering and researching these vulnerabilities.
The Common Vulnerabilities and Exposures project (cve.mitre.org) assigned the following names to these issues: CVE-2007-0061, CVE-2007-0062, CVE-2007-0063. - This release fixes a security vulnerability that could allow a guest operating system user with administrative privileges to cause memory corruption in a host process, and thus potentially execute arbitrary code on the host. The Common Vulnerabilities and Exposures project (cve.mitre.org) assigned the following name to this issue: CVE-2007-4496.
Thanks to Rafal Wojtczvk of McAfee for identifying and reporting this issue. - This release fixes a security vulnerability that could allow a guest operating system user without administrator privileges to cause a host process to become unresponsive or exit unexpectedly, making the guest operating system unusable. The Common Vulnerabilities and Exposures project (cve.mitre.org) assigned the following name to this issue: CVE-2007-4497.
Thanks to Rafal Wojtczvk of McAfee for identifying and reporting this issue. - This release fixes a security vulnerability that could allow a malicious remote user to exploit the library file IntraProcessLogging.dll to overwrite files in a system.
Thanks to the Goodfellas Security Research Team for discovering and researching these vulnerabilities.
The Common Vulnerabilities and Exposures project (cve.mitre.org) assigned the following name to this issue: CVE-2007-4059. - This release fixes a security vulnerability that could allow a malicious remote user to exploit the library file vielib.dll to overwrite files in a system.
Thanks to the Goodfellas Security Research Team for discovering and researching these vulnerabilities.
The Common Vulnerabilities and Exposures project (cve.mitre.org) assigned the following names to this issue: CVE-2007-4155. - This release fixes a problem that prevented VMware Player from launching. This problem was accompanied by the error message VMware Player unrecoverable error: (player) Exception 0xc0000005 (access violation) has occurred. This problem could result in a security vulnerability from images stored in virtual machines downloaded by the user.
- This release fixes a security vulnerability in which VMware Player was starting registered Windows services such as the Authorization service with “bare” (unquoted) paths, such as c:\program files\vmware\…. Applications and services in Windows must be started with a quoted path. This vulnerability could allow a malicious user to escalate user privileges.
Thanks to Foundstone for discovering this vulnerability.
VMware Player 2.0 adds the following features:
- Windows Vista support — You can use Windows Vista as a host and guest operating system.
- USB 2.0 Support — You can use peripherals that require high-speed performance, such as MP3 players and fast storage devices, in your virtual machines.
- Shared folders — If the virtual machine has shared folders enabled, you can use this feature to move files between the host and guest operating systems. The virtual machine must be preconfigured with shared folders enabled, and with the path specified to the designated shared folder on the host. As a security precaution, shared folders are disabled by default in VMware Player. When you open a virtual machine with shared folders in VMware Player, a notification message explains that shared folders have been disabled, and tells you how to re-enable the feature.
- Appliance view — Virtual machine appliances can now be preconfigured to display an appliance view. A virtual appliance is a fully pre-installed and pre-configured application and operating system environment that runs on any standard x86 desktop or server in a virtual machine — for example, a Web server application with a browser-based console. The appliance view gives you a brief description of the type of server or appliance and provides a link that opens the browser on the guest system and connects to the correct port for the server console. If a virtual machine is configured with an appliance view, VMware Player defaults to the appliance view. You can also use the traditional console view if you prefer.
- Welcome page — The user-friendly Welcome page gives you the option of browsing to a virtual machine file, opening a recently used virtual machine, or downloading a virtual appliance from the VMTN (VMware Technology Network) Web site.
- Experimental support for Virtual SMP — You can use VMware Player to power on a virtual machine that has more than one virtual processor assigned.