VMware releases patches for bugs found in its products

Virtualization provider VMware has patched two vulnerabilities in its Workstation, Player, Fusion, ESXi and ESX products. Flaws were fixed Thursday that could have enabled attackers to launch denial-of-service attacks or hijack an entire system. According to the alert, one of the weaknesses is the result of input data that was not “properly validated when loading checkpoint files.” A second bug causes mishandled traffic from remote virtual devices, allowing miscreants to crash the software only if they have administrative privileges. The company advised users to not import virtual machines from suspicious sources and to refrain from attaching potentially harmful remote devices, such as CD-ROMs and keyboards, to a virtual machine.