CVE-2010-1139: High severity VMware Workstation vulnerability
Format string vulnerability in vmrun in VMware VIX API 1.6.x, VMware Workstation 6.5.x before 6.5.4 build 246459, VMware Player 2.5.x before 2.5.4 build 246459, and VMware Server 2.x on Linux, and VMware Fusion 2.x before 2.0.7 build 246742, allows local users to gain privileges via format string specifiers in process metadata.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2010-1139?
The severity of CVE-2010-1139 is considered high due to its potential to allow local users to gain elevated privileges.
How do I fix CVE-2010-1139?
To mitigate CVE-2010-1139, users should upgrade to the latest versions of VMware products that have addressed this vulnerability.
What products are affected by CVE-2010-1139?
CVE-2010-1139 affects VMware VIX API 1.6.x, VMware Workstation versions prior to 6.5.4, VMware Player versions prior to 2.5.4, VMware Server 2.x, and VMware Fusion versions prior to 2.0.7.
What type of vulnerability is CVE-2010-1139?
CVE-2010-1139 is a format string vulnerability, which can be exploited to execute arbitrary code.
Who can exploit CVE-2010-1139?
CVE-2010-1139 can be exploited by local users who have access to the vulnerable VMware applications.