CVE-2009-1146: Medium severity VMware ACE vulnerability

Published Apr 6, 2009
·
Updated

Unspecified vulnerability in an ioctl in hcmon.sys in VMware Workstation 6.5.1 and earlier, VMware Player 2.5.1 and earlier, VMware ACE 2.5.1 and earlier, and VMware Server 1.0.x before 1.0.9 build 156507 and 2.0.x before 2.0.1 build 156745 allows local users to cause a denial of service via unknown vectors, a different vulnerability than CVE-2008-3761.

Affected Software

77 affected components
VMware ACE<=2.5.1
VMware ACE=1.0
VMware Player<=2.5.1
VMware Player=1.0.7
VMware ACE=2.0.5
VMware ACE=1.0.1
VMware ACE=1.0.7
VMware Workstation=5.5.6
VMware Player=1.0.6
VMware Server=1.0.1
VMware Player=2.0.1
VMware Player=2.0.2
VMware Player=1.0.2
VMware Player=2.0.4
VMware Server=1.0.2
VMware Workstation=5.5.8
VMware Server=1.0.8
VMware Workstation=5.5.5
VMware ACE=2.0.2
VMware Workstation=4.0
VMware Workstation=1.1.1
VMware Workstation=1.0.5
VMware ACE=2.0
VMware Workstation=6.5
VMware Server=1.0.4
VMware ACE=2.0.1
VMware Server=1.0.7
VMware ACE=1.0.2
VMware Workstation=5
VMware Workstation=6.0
VMware Player=2.5
VMware ACE=1.0.0
VMware Workstation=5.5.3
VMware Player=1.0.8
VMware Player=1.0.3
VMware Workstation=4.0.1
VMware Player=2.0.3
VMware Workstation=5.5.2
VMware Workstation=6.0.1
VMware Workstation=3.4
VMware Workstation=2.0.1
VMware Workstation=5.5
VMware Player=1.0.1
VMware Player=1.0.4
VMware Workstation=1.1
VMware Workstation=6.0.2
VMware Workstation=5.5.7
VMware Workstation=4.0.2
VMware Player=1.0.5
VMware Workstation=6.0.5
VMware ACE=1.0.4
VMware Server=2.0
VMware Workstation=3.2.1-patch1
VMware Workstation=6.0.4
VMware ACE=1.0.3
VMware ACE=2.5.0
VMware Workstation=5.5.1
VMware Server=1.0.3
VMware Server=1.0.6
VMware ACE=2.0.3
VMware Workstation=2.0
VMware ACE=2.0.4
VMware Player=2.0
VMware Player=2.0.5
VMware Workstation=1.0.4
VMware Workstation=1.1.2
VMware Workstation<=6.5.1
VMware Server=1.0
VMware ACE=1.0.5
VMware Workstation=5.5.4
VMware Workstation=6.0.3
VMware Workstation=1.0.1
VMware ACE=1.0.6
VMware Workstation=1.0.2
VMware Player=1.0.0
VMware Server=1.0.5
VMware Workstation=4.5.2

Event History

Apr 6, 2009
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Data Sourced
via NVD·03:30 PM
RemedyDescriptionSeverityAffected Software
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2009-1146?

CVE-2009-1146 is considered a denial of service vulnerability that affects multiple VMware products.

2

How do I fix CVE-2009-1146?

To fix CVE-2009-1146, update your VMware Workstation, Player, ACE, or Server to the latest versions as specified in the security advisories.

3

Which VMware products are affected by CVE-2009-1146?

CVE-2009-1146 affects VMware Workstation 6.5.1 and earlier, VMware Player 2.5.1 and earlier, VMware ACE 2.5.1 and earlier, and VMware Server 1.0.x before 1.0.9.

4

Can remote users exploit CVE-2009-1146?

CVE-2009-1146 is a local vulnerability, meaning it requires local user access for exploitation.

5

What could happen if CVE-2009-1146 is exploited?

Exploitation of CVE-2009-1146 could lead to a denial of service condition for the affected VMware application.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203