PT-2010-2855 · Vmware · Vmware Server+4

Published 2010-04-12 · Updated 2013-05-15 · CVE-2010-1139

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions VMware VIX API versions 1.6.x VMware Workstation versions 6.5.x through 6.5.3 VMware Player versions 2.5.x through 2.5.3 VMware Server versions 2.x VMware Fusion versions 2.x through 2.0.6

Description A format string issue in vmrun allows local users to gain privileges via format string specifiers in process metadata.

Recommendations For VMware VIX API version 1.6.x, update to a version that includes the fix for this issue. For VMware Workstation versions 6.5.x through 6.5.3, update to version 6.5.4 build 246459 or later. For VMware Player versions 2.5.x through 2.5.3, update to version 2.5.4 build 246459 or later. For VMware Server version 2.x, ensure you are running a version that includes the fix for this issue. For VMware Fusion versions 2.x through 2.0.6, update to version 2.0.7 build 246742 or later.

Fix

Use of Externally-Controlled Format String

Weakness Enumeration

CWE-134

Related Identifiers

CVE-2010-1139

Affected Products

Vmware Fusion

Vmware Player

Vmware Server

Vmware Vix Api

Vmware Workstation

References · 13

• https://nvd.nist.gov/vuln/detail/CVE-2010-1139 · Security Note
• http://secunia.com/advisories/39215 · Vendor Advisory
• http://lists.vmware.com/pipermail/security-announce/2010/000090.html · Vendor Advisory
• http://secunia.com/advisories/39201 · Vendor Advisory
• http://vmware.com/security/advisories/VMSA-2010-0007.html · Vendor Advisory
• http://security.gentoo.org/glsa/glsa-201209-25.xml · Vendor Advisory
• http://secunia.com/advisories/39206 · Vendor Advisory
• http://securityfocus.com/bid/39407 · Note
• http://securitytracker.com/id?1023835 · Note
• http://osvdb.org/63606 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1139 · Note
• http://archives.neohapsis.com/archives/bugtraq/2010-04/0077.html · Note
• http://archives.neohapsis.com/archives/fulldisclosure/2010-04/0121.html · Note