CVE-2010-4295: Race Condition
Race condition in the mounting process in vmware-mount in VMware Workstation 7.x before 7.1.2 build 301548 on Linux, VMware Player 3.1.x before 3.1.2 build 301548 on Linux, VMware Server 2.0.2 on Linux, and VMware Fusion 3.1.x before 3.1.2 build 332101 allows host OS users to gain privileges via vectors involving temporary files.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-4295?
CVE-2010-4295 is classified as a high-severity vulnerability due to its potential for privilege escalation.
How do I fix CVE-2010-4295?
To fix CVE-2010-4295, upgrade to VMware Workstation version 7.1.2 or later, VMware Player version 3.1.2 or later, VMware Server version 2.0.2, or VMware Fusion version 3.1.2 or later.
Which VMware products are affected by CVE-2010-4295?
CVE-2010-4295 affects VMware Workstation 7.x before 7.1.2, VMware Player 3.1.x before 3.1.2, VMware Server 2.0.2, and VMware Fusion 3.1.x before 3.1.2.
What type of vulnerability is CVE-2010-4295?
CVE-2010-4295 is a race condition vulnerability that occurs during the mounting process in VMware software.
Can CVE-2010-4295 be exploited remotely?
CVE-2010-4295 requires local access to the host operating system, making it a local privilege escalation vulnerability rather than a remote exploitation risk.