"2.0.4 already?", you ask. That's right, we are releasing VMware Fusion 2.0.4 today to address a critical security issue. At VMware, we take security very seriously and always stay vigilant to provide the safest products and solutions possible. Here is the security issue fixed in this release:
Host code execution vulnerability from a guest operating system: A critical vulnerability in the virtual machine display function might
allow a guest operating system to run code on the host. The Common
Vulnerabilities and Exposures project (cve.mitre.org) has assigned the
name CVE-2009-1244 to this issue.
You can read more about it at VMware security advisory VMSA-2009-0006.
VMware Fusion 2.0.4 is a free update for all VMware Fusion 1.x and VMware Fusion 2.x users. You can download the bits here. The release notes is here.
