Secunia

Two vulnerabilities have been reported in VMware Fusion, which can be exploited by malicious, local users to cause a DoS (Denial of Service) or gain escalated privileges.

1) An unspecified file permission error in the vmx86 kernel extension can be exploited to execute arbitrary code in the context of the host's system kernel.

2) An integer overflow error in the vmx86 kernel extension can be exploited to cause a DoS.

The vulnerabilities are reported in version 2.0.5 and prior.

Solution
Update to version 2.0.6 build 196839.

Provided and/or discovered by
The vendor credits Neil Kettle of Convergent Network Solutions.

Original Advisory
VMSA-2009-0013:
http://lists.vmware.com/pipermail/security-announce/2009/000066.html

Deep Links
Links available in Customer Area