PT-2009-4703 · Vmware · Vmware Esxi+5

Published 2009-11-02 · Updated 2026-02-10 · CVE-2009-2267

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Medium

Base vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 6.5.x through 6.5.3 build 185404 VMware Player versions 2.5.x through 2.5.3 build 185404 VMware ACE versions 2.5.x through 2.5.3 build 185404 VMware Server versions 1.x through 1.0.10 build 203137 VMware Server versions 2.x through 2.0.2 build 203138 VMware Fusion versions 2.x through 2.0.6 build 196839 VMware ESXi versions 3.5 and 4.0 VMware ESX versions 2.5.5, 3.0.3, 3.5, and 4.0

Description The issue allows guest OS users to gain privileges on the guest OS by specifying a crafted value for the cs register when Virtual-8086 mode is used. This occurs because the exception code is not properly set upon a page fault exception.

Recommendations For VMware Workstation versions 6.5.x through 6.5.3 build 185404, update to build 185404 or later. For VMware Player versions 2.5.x through 2.5.3 build 185404, update to build 185404 or later. For VMware ACE versions 2.5.x through 2.5.3 build 185404, update to build 185404 or later. For VMware Server versions 1.x through 1.0.10 build 203137, update to build 203137 or later. For VMware Server versions 2.x through 2.0.2 build 203138, update to build 203138 or later. For VMware Fusion versions 2.x through 2.0.6 build 196839, update to build 196839 or later. For VMware ESXi versions 3.5 and 4.0, and VMware ESX versions 2.5.5, 3.0.3, 3.5, and 4.0, update to a version that includes the fix for this issue.

Exploit

Fix

Related Identifiers

CVE-2009-2267

Affected Products

Vmware Ace

Vmware Esxi

Vmware Fusion

Vmware Player

Vmware Server

Vmware Workstation

References · 14

• 🔥 https://exploit-db.com/exploits/10207 · Exploit
• 🔥 http://securityfocus.com/bid/36841 · Exploit
• http://security.gentoo.org/glsa/glsa-201209-25.xml · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-2267 · Security Note
• http://secunia.com/advisories/37172 · Vendor Advisory
• http://vmware.com/security/advisories/VMSA-2009-0015.html · Vendor Advisory
• http://lists.vmware.com/pipermail/security-announce/2009/000069.html · Vendor Advisory
• http://vupen.com/english/advisories/2009/3062 · Vendor Advisory
• http://securitytracker.com/id?1023082 · Note
• http://securityfocus.com/archive/1/507539/100/0/threaded · Note
• https://t.me/aptreports/25834 · Telegram Post
• http://securityfocus.com/archive/1/507523/100/0/threaded · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8473 · Note
• http://securitytracker.com/id?1023083 · Note