CVE-2009-1565: Buffer Overflow
vmnc.dll in the VMnc media codec in VMware Movie Decoder before 6.5.4 Build 246459 on Windows, and the movie decoder in VMware Workstation 6.5.x before 6.5.4 build 246459, VMware Player 2.5.x before 2.5.4 build 246459, and VMware Server 2.x on Windows, allows remote attackers to execute arbitrary code via an AVI file with crafted HexTile-encoded video chunks that trigger heap-based buffer overflows, related to "integer truncation errors."
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2009-1565?
CVE-2009-1565 is classified as a high-severity vulnerability due to its potential for remote code execution.
How do I fix CVE-2009-1565?
To remediate CVE-2009-1565, upgrade to VMware Workstation 6.5.4 Build 246459, VMware Player 2.5.4 Build 246459, or apply the appropriate patches.
Which VMware products are affected by CVE-2009-1565?
CVE-2009-1565 affects VMware Workstation 6.5.0 to 6.5.3, VMware Player 2.5.0 to 2.5.3, and VMware Movie Decoder before version 6.5.4 Build 246459.
Can CVE-2009-1565 be exploited remotely?
Yes, CVE-2009-1565 can be exploited remotely, allowing attackers to execute arbitrary code on affected systems.
What is the impact of CVE-2009-1565 on system security?
The impact of CVE-2009-1565 on system security is significant as it allows attackers to gain control over vulnerable systems.