First published: Mon Apr 12 2010(Updated: )
The USB service in VMware Workstation 7.0 before 7.0.1 build 227600 and VMware Player 3.0 before 3.0.1 build 227600 on Windows might allow host OS users to gain privileges by placing a Trojan horse program at an unspecified location on the host OS disk.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
VMware Workstation | =7.0 | |
Microsoft Windows | ||
VMware Player | =3.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2010-1140 is classified as a high-severity privilege escalation vulnerability.
To fix CVE-2010-1140, upgrade to VMware Workstation 7.0.1 or later and VMware Player 3.0.1 or later.
CVE-2010-1140 affects VMware Workstation 7.0 before 7.0.1 and VMware Player 3.0 before 3.0.1.
Exploiting CVE-2010-1140 could allow an attacker to gain elevated privileges on the host operating system.
CVE-2010-1140 is vulnerable on Windows operating systems running the affected versions of VMware.