PT-2009-3708 · Vmware · Vmware Player+3

Nikita Tarakanov · Published 2009-04-06 · Updated 2018-10-30 · CVE-2009-1147

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 6.5.1 and earlier VMware Player versions 2.5.1 and earlier VMware ACE versions 2.5.1 and earlier VMware Server versions prior to 2.0.1 build 156745

Description The issue allows local users to gain privileges via unknown vectors due to an unspecified vulnerability in the vmci.sys component of the Virtual Machine Communication Interface (VMCI).

Recommendations For VMware Workstation versions 6.5.1 and earlier, update to a version later than 6.5.1. For VMware Player versions 2.5.1 and earlier, update to a version later than 2.5.1. For VMware ACE versions 2.5.1 and earlier, update to a version later than 2.5.1. For VMware Server versions prior to 2.0.1 build 156745, update to version 2.0.1 build 156745 or later.

Fix

Related Identifiers

CVE-2009-1147

Affected Products

Vmware Ace

Vmware Player

Vmware Server

Vmware Workstation

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2009-1147 · Security Note
• http://vmware.com/security/advisories/VMSA-2009-0005.html · Note
• http://seclists.org/fulldisclosure/2009/Apr/0036.html · Note
• http://lists.vmware.com/pipermail/security-announce/2009/000054.html · Note
• http://vupen.com/english/advisories/2009/0944 · Note
• http://securitytracker.com/id?1021976 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5471 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1147 · Note
• http://securityfocus.com/bid/34373 · Note