CVE-2010-1140: Medium severity VMware Workstation vulnerability
Published Apr 12, 2010
·Updated
The USB service in VMware Workstation 7.0 before 7.0.1 build 227600 and VMware Player 3.0 before 3.0.1 build 227600 on Windows might allow host OS users to gain privileges by placing a Trojan horse program at an unspecified location on the host OS disk.
Affected Software
7 affected components
VMware Workstation=7.0
Microsoft Windows
VMware Player=3.0
All of the following
VMware Workstation=7.0
Microsoft Windows
All of the following
VMware Player=3.0
Microsoft Windows
Remediation
Event History
Apr 12, 2010
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Data Sourced
06:30 PM
DescriptionWeaknessAffected Software
Data Sourced
via NVD·06:30 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2010-1140?
CVE-2010-1140 is classified as a high-severity privilege escalation vulnerability.
2
How do I fix CVE-2010-1140?
To fix CVE-2010-1140, upgrade to VMware Workstation 7.0.1 or later and VMware Player 3.0.1 or later.
3
What versions of VMware are affected by CVE-2010-1140?
CVE-2010-1140 affects VMware Workstation 7.0 before 7.0.1 and VMware Player 3.0 before 3.0.1.
4
What is the impact of exploiting CVE-2010-1140?
Exploiting CVE-2010-1140 could allow an attacker to gain elevated privileges on the host operating system.
5
What operating systems are vulnerable to CVE-2010-1140?
CVE-2010-1140 is vulnerable on Windows operating systems running the affected versions of VMware.