CVE-2010-1141: High severity VMware Workstation vulnerability

Published Apr 12, 2010
·
Updated

VMware Tools in VMware Workstation 6.5.x before 6.5.4 build 246459; VMware Player 2.5.x before 2.5.4 build 246459; VMware ACE 2.5.x before 2.5.4 build 246459; VMware Server 2.x before 2.0.2 build 203138; VMware Fusion 2.x before 2.0.6 build 246742; VMware ESXi 3.5 and 4.0; and VMware ESX 2.5.5, 3.0.3, 3.5, and 4.0 does not properly access libraries, which allows user-assisted remote attackers to execute arbitrary code by tricking a Windows guest OS user into clicking on a file that is stored on a network share.

Affected Software

64 affected components
VMware Workstation=6.5.0
VMware Workstation=6.5.1
VMware Workstation=6.5.2
VMware Workstation=6.5.3
Microsoft Windows
VMware Player=2.5
VMware Player=2.5.1
VMware Player=2.5.2
VMware Player=2.5.3
VMware ACE=2.5.0
VMware ACE=2.5.1
VMware ACE=2.5.2
VMware ACE=2.5.3
VMware Server=2.0.0
VMware Server=2.0.1
VMware Server=2.0.2
VMware Fusion=2.0
VMware Fusion=2.0.1
VMware Fusion=2.0.2
VMware Fusion=2.0.3
VMware Fusion=2.0.4
VMware Fusion=2.0.5
VMware Fusion=3.0
VMware ESXi=3.5
VMware ESXi=4.0
VMware ESX=2.5.5
VMware ESX=3.0.3
VMware ESX=3.5
VMware ESX=4.0
All of the following
Any of the following
VMware Workstation=6.5.0
VMware Workstation=6.5.1
VMware Workstation=6.5.2
VMware Workstation=6.5.3
Microsoft Windows
All of the following
Any of the following
VMware Player=2.5
VMware Player=2.5.1
VMware Player=2.5.2
VMware Player=2.5.3
Microsoft Windows
All of the following
Any of the following
VMware ACE=2.5.0
VMware ACE=2.5.1
VMware ACE=2.5.2
VMware ACE=2.5.3
Microsoft Windows
All of the following
Any of the following
VMware Server=2.0.0
VMware Server=2.0.1
VMware Server=2.0.2
Microsoft Windows
All of the following
Any of the following
VMware Fusion=2.0
VMware Fusion=2.0.1
VMware Fusion=2.0.2
VMware Fusion=2.0.3
VMware Fusion=2.0.4
VMware Fusion=2.0.5
VMware Fusion=3.0
Microsoft Windows
All of the following
Any of the following
VMware ESXi=3.5
VMware ESXi=4.0
Microsoft Windows
All of the following
Any of the following
VMware ESX=2.5.5
VMware ESX=3.0.3
VMware ESX=3.5
VMware ESX=4.0
Microsoft Windows

Event History

Apr 12, 2010
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Data Sourced
06:30 PM
DescriptionWeaknessAffected Software
Data Sourced
via NVD·06:30 PM
RemedyDescriptionSeverityWeaknessAffected Software
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2010-1141?

CVE-2010-1141 is considered to be a moderate severity vulnerability.

2

How do I fix CVE-2010-1141?

To fix CVE-2010-1141, you should update to the latest version of VMware Tools or the affected VMware products.

3

What products are affected by CVE-2010-1141?

CVE-2010-1141 affects VMware Workstation versions 6.5.x, VMware Player 2.5.x, VMware ACE 2.5.x, VMware Server 2.x, VMware Fusion 2.x, and VMware ESXi versions 3.5 and 4.0.

4

What type of vulnerability is CVE-2010-1141?

CVE-2010-1141 is a vulnerability related to privilege escalation in VMware software.

5

When was CVE-2010-1141 disclosed?

CVE-2010-1141 was disclosed in April 2010.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203