CVE-2010-1139
First published: Mon Apr 12 2010(Updated: )
Format string vulnerability in vmrun in VMware VIX API 1.6.x, VMware Workstation 6.5.x before 6.5.4 build 246459, VMware Player 2.5.x before 2.5.4 build 246459, and VMware Server 2.x on Linux, and VMware Fusion 2.x before 2.0.7 build 246742, allows local users to gain privileges via format string specifiers in process metadata.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| VMware Workstation | =6.5.1 | |
| VMware Workstation | =6.5.0 | |
| VMware Workstation | =6.5.2 | |
| VMware Workstation | =6.5.3 | |
| VMware Fusion | =2.0.1 | |
| VMware Fusion | =2.0.2 | |
| VMware Fusion | =2.0.5 | |
| VMware Fusion | =2.0 | |
| VMware Fusion | =2.0.4 | |
| VMware Fusion | =2.0.6 | |
| VMware Fusion | =2.0.3 | |
| VMware VIX API | =1.6.1 | |
| VMware VIX API | =1.6.0 | |
| VMware Player | =2.5 | |
| VMware Player | =2.5.1 | |
| VMware Player | =2.5.2 | |
| VMware Player | =2.5.3 | |
| Linux Linux kernel | ||
| VMware Server | =2.0.0 | |
| VMware Server | =2.0.1 | |
| VMware Server | =2.0.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://secunia.com/advisories/39206
- http://secunia.com/advisories/39215
- http://secunia.com/advisories/39201
- http://archives.neohapsis.com/archives/fulldisclosure/2010-04/0121.html
- http://lists.vmware.com/pipermail/security-announce/2010/000090.html
- http://www.vmware.com/security/advisories/VMSA-2010-0007.html
- http://archives.neohapsis.com/archives/bugtraq/2010-04/0077.html
- http://www.securityfocus.com/bid/39407
- http://www.securitytracker.com/id?1023835
- http://osvdb.org/63606
- http://security.gentoo.org/glsa/glsa-201209-25.xml
- collector/nvd-historical
- collector/nvd-index
- agent/weakness
- agent/severity
- agent/author
- agent/type
- agent/references
- agent/event
- agent/description
- agent/remedy
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/vmware
- canonical/vmware workstation
- version/vmware workstation/6.5.1
- version/vmware workstation/6.5.0
- version/vmware workstation/6.5.2
- version/vmware workstation/6.5.3
- canonical/vmware fusion
- version/vmware fusion/2.0.1
- version/vmware fusion/2.0.2
- version/vmware fusion/2.0.5
- version/vmware fusion/2.0
- version/vmware fusion/2.0.4
- version/vmware fusion/2.0.6
- version/vmware fusion/2.0.3
- canonical/vmware vix api
- version/vmware vix api/1.6.1
- version/vmware vix api/1.6.0
- canonical/vmware player
- version/vmware player/2.5
- version/vmware player/2.5.1
- version/vmware player/2.5.2
- version/vmware player/2.5.3
- vendor/linux
- canonical/linux linux kernel
- canonical/vmware server
- version/vmware server/2.0.0
- version/vmware server/2.0.1
- version/vmware server/2.0.2