Vulnerabilities

TI-2009-04567 CVE-2009-4811 · GHSA-8jq2-g365-87pp

VMware Authentication Daemon 1.0 in vmware-authd.exe in the VMware Authorization Service…

LOW 28

VMware Authentication Daemon 1.0 in vmware-authd.exe in the VMware Authorization Service in VMware Workstation 7.0 before 7.0.1 build 227600 and 6.5.x before 6.5.4 build 246459, VMware Player 3.0 before 3.0.1 build 22760…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02759 Published 2010-04-27 No fix listed CWE-134

TI-2010-01101 CVE-2010-1142 · GHSA-4p33-j96h-vmj6

VMware Tools in VMware Workstation 6.5.x before 6.5.4 build 246459; VMware Player 2.5.x…

MEDIUM 40

VMware Tools in VMware Workstation 6.5.x before 6.5.4 build 246459; VMware Player 2.5.x before 2.5.4 build 246459; VMware ACE 2.5.x before 2.5.4 build 246459; VMware Server 2.x before 2.0.2 build 203138; VMware Fusion 2.…

CVSS 2.0HIGH 8.5 Network Low privileges Interaction — EPSS 0.01641 Published 2010-04-12 No fix listed CWE-264

TI-2010-01100 CVE-2010-1141 · GHSA-q95x-7x5m-676v

VMware Tools in VMware Workstation 6.5.x before 6.5.4 build 246459; VMware Player 2.5.x…

MEDIUM 43

VMware Tools in VMware Workstation 6.5.x before 6.5.4 build 246459; VMware Player 2.5.x before 2.5.4 build 246459; VMware ACE 2.5.x before 2.5.4 build 246459; VMware Server 2.x before 2.0.2 build 203138; VMware Fusion 2.…

CVSS 2.0HIGH 8.5 Network Low privileges Interaction — EPSS 0.03802 Published 2010-04-12 No fix listed CWE-264

TI-2010-01097 CVE-2010-1138 · GHSA-vg5m-v3m5-vjcf

The virtual networking stack in VMware Workstation 7.0 before 7.0.1 build 227600, VMware…

LOW 27

The virtual networking stack in VMware Workstation 7.0 before 7.0.1 build 227600, VMware Workstation 6.5.x before 6.5.4 build 246459 on Windows, VMware Player 3.0 before 3.0.1 build 227600, VMware Player 2.5.x before 2.5…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02293 Published 2010-04-12 No fix listed CWE-200

TI-2009-03556 CVE-2009-3732 · GHSA-mw96-29xv-5ppf

Format string vulnerability in vmware-vmrc.exe build 158248 in VMware Remote Console (aka…

MEDIUM 59

Format string vulnerability in vmware-vmrc.exe build 158248 in VMware Remote Console (aka VMrc) allows remote attackers to execute arbitrary code via unspecified vectors.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.162 Published 2010-04-12 No fix listed CWE-134

TI-2009-02162 CVE-2009-2267 · GHSA-r3rg-38gc-7x9q

VMware Workstation 6.5.x before 6.5.3 build 185404, VMware Player 2.5.x before 2.5.3…

LOW 34

VMware Workstation 6.5.x before 6.5.3 build 185404, VMware Player 2.5.x before 2.5.3 build 185404, VMware ACE 2.5.x before 2.5.3 build 185404, VMware Server 1.x before 1.0.10 build 203137 and 2.x before 2.0.2 build 20313…

CVSS 2.0MEDIUM 6.9 Local No auth Interaction — EPSS 0.01755 Published 2009-11-02 No fix listed

TI-2009-03531 CVE-2009-3707 · GHSA-47pm-rhm6-w3xc

VMware Authentication Daemon 1.0 in vmware-authd.exe in the VMware Authorization Service…

LOW 36

VMware Authentication Daemon 1.0 in vmware-authd.exe in the VMware Authorization Service in VMware Workstation 7.0 before 7.0.1 build 227600 and 6.5.x before 6.5.4 build 246459, VMware Player 3.0 before 3.0.1 build 22760…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.11106 Published 2009-10-16 No fix listed CWE-134

TI-2009-02512 CVE-2009-2628 · GHSA-678r-9fw4-2w76

The VMnc media codec in vmnc.dll in VMware Movie Decoder before 6.5.3 build 185404…

MEDIUM 49

The VMnc media codec in vmnc.dll in VMware Movie Decoder before 6.5.3 build 185404, VMware Workstation 6.5.x before 6.5.3 build 185404, VMware Player 2.5.x before 2.5.3 build 185404, and VMware ACE 2.5.x before 2.5.3 bui…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.05568 Published 2009-09-08 No fix listed CWE-94

TI-2009-00186 CVE-2009-0199 · GHSA-jqhc-vmcp-q22q

Heap-based buffer overflow in the VMnc media codec in vmnc.dll in VMware Movie Decoder…

MEDIUM 48

Heap-based buffer overflow in the VMnc media codec in vmnc.dll in VMware Movie Decoder before 6.5.3 build 185404, VMware Workstation 6.5.x before 6.5.3 build 185404, VMware Player 2.5.x before 2.5.3 build 185404, and VMw…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.05024 Published 2009-09-08 No fix listed CWE-119

TI-2009-01717 CVE-2009-1805 · GHSA-h97j-4wj2-5jv8

Unspecified vulnerability in the VMware Descheduled Time Accounting driver in VMware…

LOW 19

Unspecified vulnerability in the VMware Descheduled Time Accounting driver in VMware Workstation 6.5.1 and earlier, VMware Player 2.5.1 and earlier, VMware ACE 2.5.1 and earlier, VMware Server 1.x before 1.0.9 build 1565…

CVSS 2.0MEDIUM 4.0 Local No auth Interaction — EPSS 0.00331 Published 2009-06-01 No fix listed

TI-2009-01179 CVE-2009-1244 · GHSA-3pp9-5q74-pq79

Unspecified vulnerability in the virtual machine display function in VMware Workstation…

LOW 34

Unspecified vulnerability in the virtual machine display function in VMware Workstation 6.5.1 and earlier; VMware Player 2.5.1 and earlier; VMware ACE 2.5.1 and earlier; VMware Server 1.x before 1.0.9 build 156507 and 2.…

CVSS 2.0MEDIUM 6.8 Local Low privileges Interaction — EPSS 0.02272 Published 2009-04-13 No fix listed

TI-2009-01088 CVE-2009-1147 · GHSA-pwvr-ph6m-wcv9

Unspecified vulnerability in vmci.sys in the Virtual Machine Communication Interface…

LOW 32

Unspecified vulnerability in vmci.sys in the Virtual Machine Communication Interface (VMCI) in VMware Workstation 6.5.1 and earlier, VMware Player 2.5.1 and earlier, VMware ACE 2.5.1 and earlier, and VMware Server 2.0.x…

CVSS 2.0HIGH 7.2 Local No auth Interaction — EPSS 0.00341 Published 2009-04-06 No fix listed

TI-2009-01087 CVE-2009-1146 · GHSA-xcc9-w59f-794q

Unspecified vulnerability in an ioctl in hcmon.sys in VMware Workstation 6.5.1 and…

LOW 22

Unspecified vulnerability in an ioctl in hcmon.sys in VMware Workstation 6.5.1 and earlier, VMware Player 2.5.1 and earlier, VMware ACE 2.5.1 and earlier, and VMware Server 1.0.x before 1.0.9 build 156507 and 2.0.x befor…

CVSS 2.0MEDIUM 4.9 Local No auth Interaction — EPSS 0.00355 Published 2009-04-06 No fix listed

TI-2009-00865 CVE-2009-0910 · GHSA-7f62-x26q-v865

Heap-based buffer overflow in the VNnc Codec in VMware Workstation 6.5.x before 6.5.2…

LOW 35

Heap-based buffer overflow in the VNnc Codec in VMware Workstation 6.5.x before 6.5.2 build 156735, VMware Player 2.5.x before 2.5.2 build 156735, VMware ACE 2.5.x before 2.5.2 build 156735, and VMware Server 2.0.x befor…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.02811 Published 2009-04-06 No fix listed CWE-119

TI-2009-00864 CVE-2009-0909 · GHSA-pwwh-5hg7-cxj9

Heap-based buffer overflow in the VNnc Codec in VMware Workstation 6.5.x before 6.5.2…

MEDIUM 48

Heap-based buffer overflow in the VNnc Codec in VMware Workstation 6.5.x before 6.5.2 build 156735, VMware Player 2.5.x before 2.5.2 build 156735, VMware ACE 2.5.x before 2.5.2 build 156735, and VMware Server 2.0.x befor…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.04627 Published 2009-04-06 No fix listed CWE-119

TI-2009-00863 CVE-2009-0908 · GHSA-vq8r-2vvq-cr5h

Unspecified vulnerability in the ACE shared folders implementation in the VMware Host…

LOW 31

Unspecified vulnerability in the ACE shared folders implementation in the VMware Host Guest File System (HGFS) shared folders feature in VMware ACE 2.5.1 and earlier allows attackers to enable a disabled shared folder.

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.01244 Published 2009-04-06 No fix listed

TI-2009-00166 CVE-2009-0177 · GHSA-mxv5-rp33-2rv9

vmwarebase.dll, as used in the vmware-authd service (aka vmware-authd.exe), in VMware…

LOW 34

vmwarebase.dll, as used in the vmware-authd service (aka vmware-authd.exe), in VMware Workstation 6.5.1 build 126130, 6.5.1 and earlier; VMware Player 2.5.1 build 126130, 2.5.1 and earlier; VMware ACE 2.5.1 and earlier;…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.08642 Published 2009-01-20 No fix listed CWE-399

TI-2008-04672 CVE-2008-4915 · GHSA-pj5p-qr67-x54j

The CPU hardware emulation in VMware Workstation 6.0.5 and earlier and 5.5.8 and earlier…

LOW 31

The CPU hardware emulation in VMware Workstation 6.0.5 and earlier and 5.5.8 and earlier; Player 2.0.x through 2.0.5 and 1.0.x through 1.0.8; ACE 2.0.x through 2.0.5 and earlier, and 1.0.x through 1.0.7; Server 1.0.x thr…

CVSS 2.0MEDIUM 6.9 Local No auth Interaction — EPSS 0.00408 Published 2008-11-10 No fix listed CWE-264

TI-2008-03731 CVE-2008-3892 · GHSA-889x-p8ww-5fp4

Buffer overflow in a certain ActiveX control in the COM API in VMware Workstation 5.5.x…

MEDIUM 64

Buffer overflow in a certain ActiveX control in the COM API in VMware Workstation 5.5.x before 5.5.8 build 108000, VMware Workstation 6.0.x before 6.0.5 build 109488, VMware Player 1.x before 1.0.8 build 108000, VMware P…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.24363 Published 2008-09-03 No fix listed CWE-119

TI-2008-03540 CVE-2008-3698 · GHSA-qw7g-m46h-fcxw

Unspecified vulnerability in the OpenProcess function in VMware Workstation 5.5.x before…

LOW 32

Unspecified vulnerability in the OpenProcess function in VMware Workstation 5.5.x before 5.5.8 build 108000, VMware Workstation 6.0.x before 6.0.5 build 109488, VMware Player 1.x before 1.0.8 build 108000, VMware Player…

CVSS 2.0HIGH 7.2 Local No auth Interaction — EPSS 0.00457 Published 2008-09-03 No fix listed CWE-264

TI-2008-03538 CVE-2008-3696 · GHSA-5m38-jjgp-q23x