PT-2009-5595 · Vmware · Vmware Fusion

Publicado 2009-10-16 · Atualizado 2009-10-19 · CVE-2009-3281

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions VMware Fusion versions prior to 2.0.6 build 196839

Description The issue is related to the vmx86 kernel extension, which does not use correct file permissions. This allows host OS users to gain privileges on the host OS via unspecified vectors.

Recommendations For versions prior to 2.0.6 build 196839, update to version 2.0.6 build 196839 or later to resolve the issue.

Exploit

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2009-3281

Produtos afetados

Vmware Fusion

Referências · 7

• 🔥 https://exploit-db.com/exploits/10076 · Exploit
• http://vupen.com/english/advisories/2009/2811 · Aviso do Fabricante
• http://vmware.com/security/advisories/VMSA-2009-0013.html · Aviso do Fabricante
• http://lists.vmware.com/pipermail/security-announce/2009/000066.html · Aviso do Fabricante
• http://securitytracker.com/id?1022981 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2009-3281 · Nota de Segurança
• http://secunia.com/advisories/36928 · Aviso do Fabricante