PT-2010-4009 · Vmware · Vmware Studio

Published 2010-07-22 · Updated 2018-10-10 · CVE-2010-2427

Positive Technologies (AI Summary)

CVSS v2.0

4.4

Medium

Base vector

AV:L/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions VMware Studio version 2.0

Description The issue allows local users to gain privileges due to improper handling of temporary files.

Recommendations For version 2.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2010-2427

Affected Products

Vmware Studio

References · 9

• http://vupen.com/english/advisories/2010/1791 · Vendor Advisory
• http://secunia.com/advisories/40507 · Vendor Advisory
• http://wmware.com/security/advisories/VMSA-2010-0011.html · Vendor Advisory
• http://lists.vmware.com/pipermail/security-announce/2010/000101.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-2427 · Security Note
• http://securityfocus.com/bid/41568 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/60351 · Note
• http://securityfocus.com/archive/1/512311/100/0/threaded · Note
• http://securitytracker.com/id?1024187 · Note