Multiple vulnerabilities have been reported in VMware ESX Server and VMware ESXi, which can be exploited by malicious, local users to gain escalated privileges and by malicious people to cause a DoS (Denial of Service) or potentially compromise a vulnerable system.

1) An unspecified error in the WDDM display driver can be exploited to cause a buffer overflow.

2) A null-pointer dereference error exists in the XPDM display driver.

3) The application bundles a vulnerable version of bzip2.

For more information:
SA41452

Note: This vulnerability only affects ESXi version 5.0.

The vulnerabilities are reported in ESX Server versions 4.1 and 4.0 and ESXi versions 5.0, 4.1, and 4.0.

Solution
Update to a fixed version (see the vendor's advisory for details).

Provided and/or discovered by
1, 2) The vendor credits Tarjei Mandt.

Original Advisory
http://www.vmware.com/security/advisories/VMSA-2012-0005.html

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers