Multiple vulnerabilities have been identified in various VMWare products, which could be exploited by remote attackers to bypass security restrictions or compromise a vulnerable system, or by local attackers to disclose sensitive information or gain elevated privileges.
The first issue is caused by an error in VMware CPU hardware emulation could allow the virtual CPU to jump to an incorrect memory address, leading to a privilege escalation on 64-bit guest operating systems.
The second weakness is caused due to user passwords containing special characters are displayed when logging into VirtualCenter Server 2.0 with Virtual Infrastructure Client 2.5, which could cause the dialog box displaying the password to appear in front or hidden behind other windows.
