CVE-2009-1147: High severity VMware ACE vulnerability

Published Apr 6, 2009
·
Updated

Unspecified vulnerability in vmci.sys in the Virtual Machine Communication Interface (VMCI) in VMware Workstation 6.5.1 and earlier, VMware Player 2.5.1 and earlier, VMware ACE 2.5.1 and earlier, and VMware Server 2.0.x before 2.0.1 build 156745 allows local users to gain privileges via unknown vectors.

Affected Software

83 affected components
VMware ACE
VMware ACE=1.0
VMware ACE=1.0.0
VMware ACE=1.0.1
VMware ACE=1.0.2
VMware ACE=1.0.3
VMware ACE=1.0.3_build_54075
VMware ACE=1.0.4
VMware ACE=1.0.5
VMware ACE=1.0.6
VMware ACE=1.0.7
VMware ACE=2.0
VMware ACE=2.0.1
VMware ACE=2.0.1_build_55017
VMware ACE=2.0.2
VMware ACE=2.0.3
VMware ACE=2.0.4
VMware ACE=2.0.5
VMware ACE=2.5.0
VMware ACE=2.5.1
VMware Workstation=1.0.1
VMware Workstation=1.0.2
VMware Workstation=1.0.4
VMware Workstation=1.0.5
VMware Workstation=1.1
VMware Workstation=1.1.1
VMware Workstation=1.1.2
VMware Workstation=2.0
VMware Workstation=2.0.1
VMware Workstation=3.2.1-patch1
VMware Workstation=3.4
VMware Workstation=4.0
VMware Workstation=4.0.1
VMware Workstation=4.0.1_build_5289
VMware Workstation=4.0.2
VMware Workstation=4.5.2
VMware Workstation=4.5.2_build_8848
VMware Workstation=4.5.2_build_8848-r4
VMware Workstation=5
VMware Workstation=5.0.0_build_13124
VMware Workstation=5.5
VMware Workstation=5.5.0_build_13124
VMware Workstation=5.5.1
VMware Workstation=5.5.1_build_19175
VMware Workstation=5.5.2
VMware Workstation=5.5.3
VMware Workstation=5.5.3-42958
VMware Workstation=5.5.3_build_34685
VMware Workstation=5.5.3_build_42958
VMware Workstation=5.5.4
VMware Workstation=5.5.4_build_44386
VMware Workstation=5.5.5
VMware Workstation=5.5.5_build_56455
VMware Workstation=5.5.6
VMware Workstation=5.5.7
VMware Workstation=5.5.8
VMware Workstation=6.0
VMware Workstation=6.0.1
VMware Workstation=6.0.1_build_55017
VMware Workstation=6.0.2
VMware Workstation=6.0.3
VMware Workstation=6.0.4
VMware Workstation=6.0.5
VMware Workstation=6.5
VMware Workstation=6.5.1
VMware Player=1.0.0
VMware Player=1.0.1
VMware Player=1.0.2
VMware Player=1.0.3
VMware Player=1.0.4
VMware Player=1.0.5
VMware Player=1.0.6
VMware Player=1.0.7
VMware Player=1.0.8
VMware Player=2.0
VMware Player=2.0.1
VMware Player=2.0.2
VMware Player=2.0.3
VMware Player=2.0.4
VMware Player=2.0.5
VMware Player=2.5
VMware Player=2.5.1
VMware Server=2.0

Event History

Apr 6, 2009
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Data Sourced
via NVD·03:30 PM
DescriptionSeverityAffected Software
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2009-1147?

CVE-2009-1147 is considered a moderate severity vulnerability that could allow local users to gain elevated privileges.

2

How do I fix CVE-2009-1147?

To fix CVE-2009-1147, upgrade to a patched version of VMware products as specified in the release notes from VMware.

3

Which VMware products are affected by CVE-2009-1147?

CVE-2009-1147 affects VMware Workstation 6.5.1 and earlier, VMware Player 2.5.1 and earlier, VMware ACE 2.5.1 and earlier, and VMware Server 2.0.x versions prior to 2.0.1.

4

What type of vulnerability is CVE-2009-1147?

CVE-2009-1147 is an unspecified local privilege escalation vulnerability in the Virtual Machine Communication Interface.

5

When was CVE-2009-1147 disclosed?

CVE-2009-1147 was disclosed in April 2009 and is part of the VMware security announcements.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203