PT-2009-3707 · Vmware · Vmware Player+3

Nikita Tarakanov · Published 2009-04-06 · Updated 2018-10-30 · CVE-2009-1146

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Medium

Base vector

AV:L/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 6.5.1 and earlier VMware Player versions 2.5.1 and earlier VMware ACE versions 2.5.1 and earlier VMware Server versions prior to 1.0.9 build 156507 VMware Server versions 2.0.x prior to 2.0.1 build 156745

Description The issue allows local users to cause a denial of service via unknown vectors.

Recommendations For VMware Workstation versions 6.5.1 and earlier, update to a version later than 6.5.1. For VMware Player versions 2.5.1 and earlier, update to a version later than 2.5.1. For VMware ACE versions 2.5.1 and earlier, update to a version later than 2.5.1. For VMware Server versions prior to 1.0.9 build 156507, update to version 1.0.9 build 156507 or later. For VMware Server versions 2.0.x prior to 2.0.1 build 156745, update to version 2.0.1 build 156745 or later.

Fix

Related Identifiers

CVE-2009-1146

Affected Products

Vmware Ace

Vmware Player

Vmware Server

Vmware Workstation

References · 9

• http://lists.vmware.com/pipermail/security-announce/2009/000054.html · Vendor Advisory
• http://seclists.org/fulldisclosure/2009/Apr/0036.html · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2009-1146 · Security Note
• http://vmware.com/security/advisories/VMSA-2009-0005.html · Note
• http://securitytracker.com/id?1021977 · Note
• http://vupen.com/english/advisories/2009/0944 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1146 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6310 · Note
• http://securityfocus.com/bid/34373 · Note