VMware Workstation TrueType Font Handling Vulnerability
VMware Workstation contains a feature called 'Virtual Printers' that allows virtualized operating systems to access printers installed on the host. The communication between the virtual machine and the host is handled by a process called 'vprintproxy.exe'. A vulnerability exists in the handling of TrueType fonts embedded in EMFSPOOL files, specifically in the TPView.DLL library used by vprintproxy.exe. When processing printing request data, the program copies the contents of the CMAP table into the NAME table in memory. However, if the NAME table is larger than the CMAP table, a new NAME table is created with the data from the CMAP table. This vulnerability could allow an attacker to execute arbitrary code or escape the virtual machine.