Some vulnerabilities have been reported in VMware Workstation Movie Decoder, which can be exploited by malicious people to compromise a user's system.

1) A boundary error in the VMnc codec (vmnc.dll) can be exploited to cause a heap-based buffer overflow via a specially crafted video file with mismatched dimensions.

The vulnerability is confirmed in vmnc.dll version 6.5.2.7026. Other versions may also be affected.

2) An error in the VMnc codec when handling video content with a height below 8 pixels can be exploited to corrupt heap memory.

Successful exploitation of the vulnerabilities may allow execution of arbitrary code.

Solution
Update to version 6.5.3 build 185404:
Further details available in Customer Area

Provided and/or discovered by
1) Alin Rad Pop, Secunia Research
2) Will Dormann, CERT/CC

Original Advisory
Secunia Research:
http://secunia.com/secunia_research/2009-25/

VMWare (VMSA-2009-0012):
http://lists.vmware.com/pipermail/security-announce/2009/000065.html

US-CERT VU#444513:
http://www.kb.cert.org/vuls/id/444513

Deep Links
Links available in Customer Area