PT-2009-3708 · Vmware · Vmware Player+3

Nikita Tarakanov · Publicado 2009-04-06 · Atualizado 2018-10-30 · CVE-2009-1147

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 6.5.1 and earlier VMware Player versions 2.5.1 and earlier VMware ACE versions 2.5.1 and earlier VMware Server versions prior to 2.0.1 build 156745

Description The issue allows local users to gain privileges via unknown vectors due to an unspecified vulnerability in the vmci.sys component of the Virtual Machine Communication Interface (VMCI).

Recommendations For VMware Workstation versions 6.5.1 and earlier, update to a version later than 6.5.1. For VMware Player versions 2.5.1 and earlier, update to a version later than 2.5.1. For VMware ACE versions 2.5.1 and earlier, update to a version later than 2.5.1. For VMware Server versions prior to 2.0.1 build 156745, update to version 2.0.1 build 156745 or later.

Correção

Identificadores relacionados

CVE-2009-1147

Produtos afetados

Vmware Ace

Vmware Player

Vmware Server

Vmware Workstation

Referências · 9

• http://vmware.com/security/advisories/VMSA-2009-0005.html · Nota
• http://seclists.org/fulldisclosure/2009/Apr/0036.html · Nota
• http://lists.vmware.com/pipermail/security-announce/2009/000054.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2009-1147 · Nota de Segurança
• http://vupen.com/english/advisories/2009/0944 · Nota
• http://securitytracker.com/id?1021976 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5471 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1147 · Nota
• http://securityfocus.com/bid/34373 · Nota