Download VMware Workstation Player 15.0.4

VMware has released the fourth update for version 15 Workstation Player. Player is free software to create and run virtual machines. However, a fee is charged for commercial use. Simply put, it is a simplified implementation of other VMware products, such as Workstation Pro, Server, and ESX Server. Microsoft Virtual PC virtual machines and Symantec LiveState Recovery disks are also supported. In addition, several pre-installed virtual machines can be installed via this page are downloaded, such as Debian, Ubuntu, and Fedora. Version 15.0.4 fixes some security vulnerabilities in the Universal Host Controller Interface.

This release of VMware Workstation Player addresses the following issue:

• VMware Workstation Player contains an out-of-bounds read/write vulnerability and a Time-of-check Time-of-use (TOCTOU) vulnerability in the virtual USB UHCI (Universal Host Controller Interface). These issues may allow a guest to execute code on the host. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the identifiers CVE-2019-5518 (out-of-bounds read/write) and CVE-2019-5519 (TOCTOU) to these issues. see VMSA-2019-0005 for further information.