CVE-2010-1142: High severity VMware Workstation vulnerability

Published Apr 12, 2010
·
Updated

VMware Tools in VMware Workstation 6.5.x before 6.5.4 build 246459; VMware Player 2.5.x before 2.5.4 build 246459; VMware ACE 2.5.x before 2.5.4 build 246459; VMware Server 2.x before 2.0.2 build 203138; VMware Fusion 2.x before 2.0.6 build 246742; VMware ESXi 3.5 and 4.0; and VMware ESX 2.5.5, 3.0.3, 3.5, and 4.0 does not properly load VMware programs, which might allow Windows guest OS users to gain privileges by placing a Trojan horse program at an unspecified location on the guest OS disk.

Affected Software

64 affected components
VMware Workstation=6.5.0
VMware Workstation=6.5.1
VMware Workstation=6.5.2
VMware Workstation=6.5.3
Microsoft Windows
VMware Player=2.5
VMware Player=2.5.1
VMware Player=2.5.2
VMware Player=2.5.3
VMware ACE=2.5.0
VMware ACE=2.5.1
VMware ACE=2.5.2
VMware ACE=2.5.3
VMware Server=2.0.0
VMware Server=2.0.1
VMware Server=2.0.2
VMware Fusion=2.0
VMware Fusion=2.0.1
VMware Fusion=2.0.2
VMware Fusion=2.0.3
VMware Fusion=2.0.4
VMware Fusion=2.0.5
VMware Fusion=3.0
VMware ESXi=3.5
VMware ESXi=4.0
VMware ESX=2.5.5
VMware ESX=3.0.3
VMware ESX=3.5
VMware ESX=4.0
All of the following
Any of the following
VMware Workstation=6.5.0
VMware Workstation=6.5.1
VMware Workstation=6.5.2
VMware Workstation=6.5.3
Microsoft Windows
All of the following
Any of the following
VMware Player=2.5
VMware Player=2.5.1
VMware Player=2.5.2
VMware Player=2.5.3
Microsoft Windows
All of the following
Any of the following
VMware ACE=2.5.0
VMware ACE=2.5.1
VMware ACE=2.5.2
VMware ACE=2.5.3
Microsoft Windows
All of the following
Any of the following
VMware Server=2.0.0
VMware Server=2.0.1
VMware Server=2.0.2
Microsoft Windows
All of the following
Any of the following
VMware Fusion=2.0
VMware Fusion=2.0.1
VMware Fusion=2.0.2
VMware Fusion=2.0.3
VMware Fusion=2.0.4
VMware Fusion=2.0.5
VMware Fusion=3.0
Microsoft Windows
All of the following
Any of the following
VMware ESXi=3.5
VMware ESXi=4.0
Microsoft Windows
All of the following
Any of the following
VMware ESX=2.5.5
VMware ESX=3.0.3
VMware ESX=3.5
VMware ESX=4.0
Microsoft Windows

Event History

Apr 12, 2010
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Data Sourced
06:30 PM
DescriptionWeaknessAffected Software
Data Sourced
via NVD·06:30 PM
RemedyDescriptionSeverityWeaknessAffected Software
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2010-1142?

CVE-2010-1142 is classified as a high severity vulnerability due to potential privilege escalation risks.

2

How do I fix CVE-2010-1142?

To remedy CVE-2010-1142, upgrade VMware Tools to version 6.5.4 or later for affected VMware products.

3

Which VMware products are affected by CVE-2010-1142?

CVE-2010-1142 affects VMware Workstation, VMware Player, VMware ACE, VMware Server, VMware Fusion, and VMware ESXi versions prior to specified patches.

4

What is the impact of CVE-2010-1142?

The impact of CVE-2010-1142 is primarily privilege escalation, potentially allowing unauthorized users to gain administrative access.

5

When was CVE-2010-1142 discovered?

CVE-2010-1142 was disclosed in April 2010, involving multiple vulnerabilities in VMware products.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203