CVE-2010-3277: Low severity vmware workstation and esxi vulnerability
The installer in VMware Workstation 7.x before 7.1.2 build 301548 and VMware Player 3.x before 3.1.2 build 301548 renders an index.htm file if present in the installation directory, which might allow local users to trigger unintended interpretation of web script or HTML by creating this file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-3277?
CVE-2010-3277 is a moderate severity vulnerability due to the risk of local users triggering unintended script interpretations.
How do I fix CVE-2010-3277?
To fix CVE-2010-3277, ensure that you update to VMware Workstation 7.1.2 build 301548 or later, and VMware Player 3.1.2 build 301548 or later.
What versions of VMware are affected by CVE-2010-3277?
CVE-2010-3277 affects VMware Workstation versions 7.0, 7.0.1, 7.1, 7.1.1 and VMware Player versions 3.0, 3.0.1, 3.1, and 3.1.1.
What is the impact of CVE-2010-3277?
The impact of CVE-2010-3277 allows local users to execute unintended web scripts or HTML if they create a malicious index.htm file in the installation directory.
Is there a workaround for CVE-2010-3277?
A possible workaround for CVE-2010-3277 is to restrict local access to the installation directory to prevent unauthorized file creation.