VMware has acknowledged a weakness and some vulnerabilities in VMware Workstation and Player, which can be exploited by malicious, local users to bypass certain security restrictions and malicious people to cause a DoS (Denial of Service) and potentially compromise a user's system.

For more information:
SA38774
SA40302

1) A weakness is caused due to the VMware Workstation and Player installers loading an "index.htm" file located in the current working directory, which can be exploited to display a malicious HTML file by placing it into the directory prior to a user running the installer.

Note: This weakness does not affect already installed versions.

Solution
Update to a fixed version.
Further details available to Secunia VIM customers

Provided and/or discovered by
1) The vendor credits Alexander Trofimov and Marc Esher.

Original Advisory
VMSA-2010-0014:
http://lists.vmware.com/pipermail/security-announce/2010/000105.html

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers