CVE-2016-7083

Severity: high (CVSS 7.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2016-12-29 · updated 2026-06-17
Weakness: CWE-119

Description

VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows, when Cortado ThinPrint virtual printing is enabled, allow guest OS users to execute arbitrary code on the host OS or cause a denial of service (host OS memory corruption) via TrueType fonts embedded in EMFSPOOL.

Affected products

VMware Workstation Player: 12.0.0, 12.0.1, 12.1.0, 12.1.1
VMware Workstation Pro: 12.0.0, 12.0.1, 12.1.0, 12.1.1

References

http://www.securityfocus.com/bid/92934
http://www.securitytracker.com/id/1036805
http://www.vmware.com/security/advisories/VMSA-2016-0014.html
https://www.exploit-db.com/exploits/40398/
http://www.securityfocus.com/bid/92934
http://www.securitytracker.com/id/1036805
http://www.vmware.com/security/advisories/VMSA-2016-0014.html
https://www.exploit-db.com/exploits/40398/

Get alerted when CVE-2016-7083 or the next vulnerability affects your stack