PT-2009-3786 · Vmware · Vmware Ace+5

Publicado 2009-04-13 · Atualizado 2018-10-30 · CVE-2009-1244

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:L/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 6.5.1 and earlier VMware Player versions 2.5.1 and earlier VMware ACE versions 2.5.1 and earlier VMware Server versions prior to 1.0.9 build 156507 and prior to 2.0.1 build 156745 VMware Fusion versions prior to 2.0.4 build 159196 VMware ESXi version 3.5 VMware ESX versions 3.0.2, 3.0.3, and 3.5

Description The issue allows guest OS users to execute arbitrary code on the host OS via unknown vectors. This is a result of an unspecified vulnerability in the virtual machine display function.

Recommendations For VMware Workstation versions 6.5.1 and earlier, update to a version later than 6.5.1. For VMware Player versions 2.5.1 and earlier, update to a version later than 2.5.1. For VMware ACE versions 2.5.1 and earlier, update to a version later than 2.5.1. For VMware Server versions prior to 1.0.9 build 156507, update to version 1.0.9 build 156507 or later. For VMware Server versions prior to 2.0.1 build 156745, update to version 2.0.1 build 156745 or later. For VMware Fusion versions prior to 2.0.4 build 159196, update to version 2.0.4 build 159196 or later. For VMware ESXi version 3.5, update to a version later than 3.5. For VMware ESX versions 3.0.2, 3.0.3, and 3.5, update to a version later than 3.5.

Exploit

Correção

Identificadores relacionados

CVE-2009-1244

Produtos afetados

Vmware Ace

Vmware Esxi

Vmware Fusion

Vmware Player

Vmware Server

Vmware Workstation

Referências · 13

• 🔥 https://github.com/piotrbania/vmware_exploit_pack_CVE-2009-1244 · Exploit
• http://securityfocus.com/bid/34471 · Correção
• http://security.gentoo.org/glsa/glsa-201209-25.xml · Aviso do Fabricante
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6065 · Nota
• http://osvdb.org/53634 · Nota
• http://securitytracker.com/id?1022031 · Nota
• http://lists.vmware.com/pipermail/security-announce/2009/000055.html · Aviso do Fabricante
• http://vmware.com/security/advisories/VMSA-2009-0006.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2009-1244 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/49834 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1244 · Nota
• http://vupen.com/english/advisories/2009/0944 · Nota
• http://securityfocus.com/archive/1/502615/100/0/threaded · Nota