PT-2010-2856 · Vmware · Vmware Player+1

Publicado 2010-04-12 · Atualizado 2013-05-15 · CVE-2010-1140

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Média

Vetor base

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 7.0 through 7.0.1 build 227600 VMware Player versions 3.0 through 3.0.1 build 227600

Description The issue is related to the USB service, which might allow host OS users to gain privileges by placing a malicious program at an unspecified location on the host OS disk.

Recommendations For VMware Workstation versions 7.0 through 7.0.1 build 227600, update to version 7.0.1 build 227600 or later. For VMware Player versions 3.0 through 3.0.1 build 227600, update to version 3.0.1 build 227600 or later.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2010-1140

Produtos afetados

Vmware Player

Vmware Workstation

Referências · 10

• http://lists.vmware.com/pipermail/security-announce/2010/000090.html · Aviso do Fabricante
• http://vmware.com/security/advisories/VMSA-2010-0007.html · Aviso do Fabricante
• http://securityfocus.com/bid/39397 · Nota
• http://security.gentoo.org/glsa/glsa-201209-25.xml · Aviso do Fabricante
• http://secunia.com/advisories/39206 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1140 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2010-1140 · Nota de Segurança
• http://securitytracker.com/id?1023834 · Nota
• http://archives.neohapsis.com/archives/bugtraq/2010-04/0077.html · Nota
• http://archives.neohapsis.com/archives/fulldisclosure/2010-04/0121.html · Nota