vmx86.sys in VMware Workstation 10.0.1 build 1379776 and VMware Player 6.0.1 build 1379776 on Windows might allow local users to cause a denial of service (read access violation and system crash) via a crafted buffer in an IOCTL call. NOTE: the researcher reports "Vendor rated issue as non-exploitable."
VMware WorkStation version 10.0.1 build-1379776 and VMware Player version 6.0.1 build-1379776 suffer from an invalid pointer dereference vulnerability.