• info
• discussion
• exploit
• solution
• references

VMware Clipboard Multiple Information Disclosure Vulnerabilities

VMware is prone to two information-disclosure vulnerabilities because of multiple design errors in the clipboard plugin.

An attacker can exploit these issues to obtain sensitive information that may lead to further attacks.

Version 5.5.3 build 34685 is vulnerable to these issues; other versions may also be affected.

Note that the clipboard plugin is an add-on feature that is not active by default.