PT-2009-5596 · Vmware · Vmware Fusion

Published 2009-10-16 · Updated 2009-10-20 · CVE-2009-3282

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions VMware Fusion versions prior to 2.0.6 build 196839

Description The issue is related to an integer overflow in the vmx86 kernel extension, which can be exploited by host OS users to cause a denial of service to the host OS. The exact vectors used for the exploitation are not specified.

Recommendations For versions prior to 2.0.6 build 196839, update to version 2.0.6 build 196839 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-189

Related Identifiers

CVE-2009-3282

Affected Products

Vmware Fusion

References · 6

• http://vupen.com/english/advisories/2009/2811 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-3282 · Security Note
• http://lists.vmware.com/pipermail/security-announce/2009/000066.html · Vendor Advisory
• http://vmware.com/security/advisories/VMSA-2009-0013.html · Vendor Advisory
• http://secunia.com/advisories/36928 · Vendor Advisory
• http://securitytracker.com/id?1022981 · Note