Download VMware Fusion 4.1.3 build 730298

VMware has released an update to version 4.1 of Fusion. Fusion is to Mac OS X what Workstation is to Windows and Linux. The program makes it possible to create virtual machines on a Mac OS X machine equipped with an Intel processor. In this way it is possible, for example, to run Windows, Linux or Solaris alongside the existing operating system. In version 4.1, support for Mac OS X 10.7 Lion has been further improved, as has graphics performance. A license for VMware Fusion costs about 45 euros. Below are the changes made in this update.

General Issues

• Resolved an intermittent issue with an unreleased version of Mac OS X.
• Fixed a race-condition when starting VMware Tools in some OpenSUSE virtual machines.

Security Issues

• VMware host Checkpoint file memory corruption
  Input data was not properly validated when loading Checkpoint files. This issue could have allowed an attacker with the ability to load a specially crafted Checkpoint file to execute arbitrary code on the host.
  The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2012-3288 to this issue.
• VMware floppy device out-of-bounds memory write.
  Due to a flaw in the virtual floppy configuration, it was possible to perform an out-of-bounds memory write. This vulnerability could have allowed a guest user to crash the VMX process or to potentially execute code on the host.
  The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2012-2449 to this issue.

VMware Security Advisory VMSA-2012-0009 and VMware Security Advisory VMSA-2012-0011 document workarounds and mitigation for these resolved issues.