PT-2009-3786 · Vmware · Vmware Ace+5

Published 2009-04-13 · Updated 2018-10-30 · CVE-2009-1244

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:L/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 6.5.1 and earlier VMware Player versions 2.5.1 and earlier VMware ACE versions 2.5.1 and earlier VMware Server versions prior to 1.0.9 build 156507 and prior to 2.0.1 build 156745 VMware Fusion versions prior to 2.0.4 build 159196 VMware ESXi version 3.5 VMware ESX versions 3.0.2, 3.0.3, and 3.5

Description The issue allows guest OS users to execute arbitrary code on the host OS via unknown vectors. This is a result of an unspecified vulnerability in the virtual machine display function.

Recommendations For VMware Workstation versions 6.5.1 and earlier, update to a version later than 6.5.1. For VMware Player versions 2.5.1 and earlier, update to a version later than 2.5.1. For VMware ACE versions 2.5.1 and earlier, update to a version later than 2.5.1. For VMware Server versions prior to 1.0.9 build 156507, update to version 1.0.9 build 156507 or later. For VMware Server versions prior to 2.0.1 build 156745, update to version 2.0.1 build 156745 or later. For VMware Fusion versions prior to 2.0.4 build 159196, update to version 2.0.4 build 159196 or later. For VMware ESXi version 3.5, update to a version later than 3.5. For VMware ESX versions 3.0.2, 3.0.3, and 3.5, update to a version later than 3.5.

Exploit

Fix

Related Identifiers

CVE-2009-1244

Affected Products

Vmware Ace

Vmware Esxi

Vmware Fusion

Vmware Player

Vmware Server

Vmware Workstation

References · 13

• 🔥 https://github.com/piotrbania/vmware_exploit_pack_CVE-2009-1244 · Exploit
• http://securityfocus.com/bid/34471 · Patch
• http://security.gentoo.org/glsa/glsa-201209-25.xml · Vendor Advisory
• http://lists.vmware.com/pipermail/security-announce/2009/000055.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-1244 · Security Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6065 · Note
• http://osvdb.org/53634 · Note
• http://securitytracker.com/id?1022031 · Note
• http://vmware.com/security/advisories/VMSA-2009-0006.html · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/49834 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1244 · Note
• http://vupen.com/english/advisories/2009/0944 · Note
• http://securityfocus.com/archive/1/502615/100/0/threaded · Note