VMware has acknowledged some vulnerabilities in VMware ACE, which can be exploited by malicious, local users to gain escalated privileges and by malicious people to potentially compromise a user's system.

1) Various vulnerabilities are caused due to unspecified errors within certain ActiveX controls. These can be exploited to e.g. execute arbitrary code by tricking a user into visiting a malicious website.

2) An unspecified error related to "OpenProcess" can be exploited by malicious, local users on a host system to gain escalated privileges on the host system.

This vulnerability affects VMware ACE 1.x for Windows only.

Solution
VMware ACE 1.x:
Further details available to Secunia VIM customers

Provided and/or discovered by
1) The vendor credits Julien Bachmann, Shennan Wang, Shinnai, and Michal Bucko.
2) The vendor credits Sun Bing, McAfee.

Original Advisory
http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/064118.html

Deep Links
Links available to Secunia VIM customers