PT-2009-5596 · Vmware · Vmware Fusion

Publicado 2009-10-16 · Atualizado 2009-10-20 · CVE-2009-3282

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions VMware Fusion versions prior to 2.0.6 build 196839

Description The issue is related to an integer overflow in the vmx86 kernel extension, which can be exploited by host OS users to cause a denial of service to the host OS. The exact vectors used for the exploitation are not specified.

Recommendations For versions prior to 2.0.6 build 196839, update to version 2.0.6 build 196839 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-189

Identificadores relacionados

CVE-2009-3282

Produtos afetados

Vmware Fusion

Referências · 6

• http://vupen.com/english/advisories/2009/2811 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2009-3282 · Nota de Segurança
• http://lists.vmware.com/pipermail/security-announce/2009/000066.html · Aviso do Fabricante
• http://securitytracker.com/id?1022981 · Nota
• http://vmware.com/security/advisories/VMSA-2009-0013.html · Aviso do Fabricante
• http://secunia.com/advisories/36928 · Aviso do Fabricante