Vulnerabilities

TI-2010-04036 CVE-2010-4296 · GHSA-9p6f-fgq7-v5pr

vmware-mount in VMware Workstation 7.x before 7.1.2 build 301548 on Linux, VMware Player…

LOW 32

vmware-mount in VMware Workstation 7.x before 7.1.2 build 301548 on Linux, VMware Player 3.1.x before 3.1.2 build 301548 on Linux, VMware Server 2.0.2 on Linux, and VMware Fusion 3.1.x before 3.1.2 build 332101 does not…

CVSS 2.0HIGH 7.2 Local No auth Interaction — EPSS 0.00368 Published 2010-12-06 No fix listed CWE-863

TI-2010-04035 CVE-2010-4295 · GHSA-fmhg-h6vw-qwgj

Race condition in the mounting process in vmware-mount in VMware Workstation 7.x before…

LOW 30

Race condition in the mounting process in vmware-mount in VMware Workstation 7.x before 7.1.2 build 301548 on Linux, VMware Player 3.1.x before 3.1.2 build 301548 on Linux, VMware Server 2.0.2 on Linux, and VMware Fusion…

CVSS 2.0MEDIUM 6.9 Local No auth Interaction — EPSS 0.00285 Published 2010-12-06 No fix listed CWE-362

TI-2010-04034 CVE-2010-4294 · GHSA-2q9v-9rr4-w95c

The frame decompression functionality in the VMnc media codec in VMware Movie Decoder…

MEDIUM 49

The frame decompression functionality in the VMnc media codec in VMware Movie Decoder before 6.5.5 build 328052 and 7.x before 7.1.2 build 301548, VMware Workstation 6.5.x before 6.5.5 build 328052 and 7.x before 7.1.2 b…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.05844 Published 2010-12-06 No fix listed CWE-94

TI-2009-04567 CVE-2009-4811 · GHSA-8jq2-g365-87pp

VMware Authentication Daemon 1.0 in vmware-authd.exe in the VMware Authorization Service…

LOW 28

VMware Authentication Daemon 1.0 in vmware-authd.exe in the VMware Authorization Service in VMware Workstation 7.0 before 7.0.1 build 227600 and 6.5.x before 6.5.4 build 246459, VMware Player 3.0 before 3.0.1 build 22760…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02759 Published 2010-04-27 No fix listed CWE-134

TI-2010-01101 CVE-2010-1142 · GHSA-4p33-j96h-vmj6

VMware Tools in VMware Workstation 6.5.x before 6.5.4 build 246459; VMware Player 2.5.x…

MEDIUM 40

VMware Tools in VMware Workstation 6.5.x before 6.5.4 build 246459; VMware Player 2.5.x before 2.5.4 build 246459; VMware ACE 2.5.x before 2.5.4 build 246459; VMware Server 2.x before 2.0.2 build 203138; VMware Fusion 2.…

CVSS 2.0HIGH 8.5 Network Low privileges Interaction — EPSS 0.01641 Published 2010-04-12 No fix listed CWE-264

TI-2010-01100 CVE-2010-1141 · GHSA-q95x-7x5m-676v

VMware Tools in VMware Workstation 6.5.x before 6.5.4 build 246459; VMware Player 2.5.x…

MEDIUM 43

VMware Tools in VMware Workstation 6.5.x before 6.5.4 build 246459; VMware Player 2.5.x before 2.5.4 build 246459; VMware ACE 2.5.x before 2.5.4 build 246459; VMware Server 2.x before 2.0.2 build 203138; VMware Fusion 2.…

CVSS 2.0HIGH 8.5 Network Low privileges Interaction — EPSS 0.03802 Published 2010-04-12 No fix listed CWE-264

TI-2010-01098 CVE-2010-1139 · GHSA-3jcj-m65j-r72c

Format string vulnerability in vmrun in VMware VIX API 1.6.x, VMware Workstation 6.5.x…

LOW 32

Format string vulnerability in vmrun in VMware VIX API 1.6.x, VMware Workstation 6.5.x before 6.5.4 build 246459, VMware Player 2.5.x before 2.5.4 build 246459, and VMware Server 2.x on Linux, and VMware Fusion 2.x befor…

CVSS 2.0HIGH 7.2 Local No auth Interaction — EPSS 0.00333 Published 2010-04-12 No fix listed CWE-134

TI-2010-01097 CVE-2010-1138 · GHSA-vg5m-v3m5-vjcf

The virtual networking stack in VMware Workstation 7.0 before 7.0.1 build 227600, VMware…

LOW 27

The virtual networking stack in VMware Workstation 7.0 before 7.0.1 build 227600, VMware Workstation 6.5.x before 6.5.4 build 246459 on Windows, VMware Player 3.0 before 3.0.1 build 227600, VMware Player 2.5.x before 2.5…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02293 Published 2010-04-12 No fix listed CWE-200

TI-2009-03556 CVE-2009-3732 · GHSA-mw96-29xv-5ppf

Format string vulnerability in vmware-vmrc.exe build 158248 in VMware Remote Console (aka…

MEDIUM 59

Format string vulnerability in vmware-vmrc.exe build 158248 in VMware Remote Console (aka VMrc) allows remote attackers to execute arbitrary code via unspecified vectors.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.162 Published 2010-04-12 No fix listed CWE-134

TI-2009-01481 CVE-2009-1565 · GHSA-jx4p-7rxf-f2v3

vmnc.dll in the VMnc media codec in VMware Movie Decoder before 6.5.4 Build 246459 on…

MEDIUM 49

vmnc.dll in the VMnc media codec in VMware Movie Decoder before 6.5.4 Build 246459 on Windows, and the movie decoder in VMware Workstation 6.5.x before 6.5.4 build 246459, VMware Player 2.5.x before 2.5.4 build 246459, a…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.0621 Published 2010-04-12 No fix listed CWE-119

TI-2009-01480 CVE-2009-1564 · GHSA-xgj4-xv99-p98g

Heap-based buffer overflow in vmnc.dll in the VMnc media codec in VMware Movie Decoder…

MEDIUM 49

Heap-based buffer overflow in vmnc.dll in the VMnc media codec in VMware Movie Decoder before 6.5.4 Build 246459 on Windows, and the movie decoder in VMware Workstation 6.5.x before 6.5.4 build 246459, VMware Player 2.5.…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.0621 Published 2010-04-12 No fix listed CWE-119

TI-2010-01149 CVE-2010-1193 · GHSA-f58m-4rgp-w5c6

Cross-site scripting (XSS) vulnerability in WebAccess in VMware Server 2.0 allows remote…

LOW 23

Cross-site scripting (XSS) vulnerability in WebAccess in VMware Server 2.0 allows remote attackers to inject arbitrary web script or HTML via vectors related to JSON error messages.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0165 Published 2010-04-01 No fix listed CWE-79

TI-2010-01096 CVE-2010-1137 · GHSA-mf4m-6x9r-f777

Cross-site scripting (XSS) vulnerability in WebAccess in VMware VirtualCenter 2.0.2 and…

LOW 25

Cross-site scripting (XSS) vulnerability in WebAccess in VMware VirtualCenter 2.0.2 and 2.5 and VMware ESX 3.0.3 and 3.5, and the Server Console in VMware Server 1.0, allows remote attackers to inject arbitrary web scrip…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0239 Published 2010-04-01 No fix listed CWE-79

TI-2010-00655 CVE-2010-0686 · GHSA-398r-4xmm-8gch

WebAccess in VMware VirtualCenter 2.0.2 and 2.5, VMware Server 2.0, and VMware ESX 3.0.3…

LOW 37

WebAccess in VMware VirtualCenter 2.0.2 and 2.5, VMware Server 2.0, and VMware ESX 3.0.3 and 3.5 allows remote attackers to leverage proxy-server functionality to spoof the origin of requests via unspecified vectors, rel…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0222 Published 2010-04-01 No fix listed CWE-20

TI-2009-03555 CVE-2009-3731 · GHSA-mpjr-rv63-f738

Multiple cross-site scripting (XSS) vulnerabilities in WebWorks Help 2.0 through 5.0 in…

LOW 25

Multiple cross-site scripting (XSS) vulnerabilities in WebWorks Help 2.0 through 5.0 in VMware vCenter 4.0 before Update 1 Build 208156; VMware Server 2.0.2; VMware ESX 4.0; VMware Lab Manager 2.x; VMware vCenter Lab Man…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02777 Published 2009-12-16 No fix listed CWE-79

TI-2009-03557 CVE-2009-3733 · GHSA-wfqc-2mvj-wfhf

Directory traversal vulnerability in VMware Server 1.x before 1.0.10 build 203137 and 2.x…

MEDIUM 64

Directory traversal vulnerability in VMware Server 1.x before 1.0.10 build 203137 and 2.x before 2.0.2 build 203138 on Linux, VMware ESXi 3.5, and VMware ESX 3.0.3 and 3.5 allows remote attackers to read arbitrary files…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.83378 Published 2009-11-02 No fix listed CWE-22

TI-2009-02162 CVE-2009-2267 · GHSA-r3rg-38gc-7x9q

VMware Workstation 6.5.x before 6.5.3 build 185404, VMware Player 2.5.x before 2.5.3…

LOW 34

VMware Workstation 6.5.x before 6.5.3 build 185404, VMware Player 2.5.x before 2.5.3 build 185404, VMware ACE 2.5.x before 2.5.3 build 185404, VMware Server 1.x before 1.0.10 build 203137 and 2.x before 2.0.2 build 20313…

CVSS 2.0MEDIUM 6.9 Local No auth Interaction — EPSS 0.01755 Published 2009-11-02 No fix listed

TI-2009-03531 CVE-2009-3707 · GHSA-47pm-rhm6-w3xc

VMware Authentication Daemon 1.0 in vmware-authd.exe in the VMware Authorization Service…

LOW 36

VMware Authentication Daemon 1.0 in vmware-authd.exe in the VMware Authorization Service in VMware Workstation 7.0 before 7.0.1 build 227600 and 6.5.x before 6.5.4 build 246459, VMware Player 3.0 before 3.0.1 build 22760…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.11106 Published 2009-10-16 No fix listed CWE-134

TI-2009-01717 CVE-2009-1805 · GHSA-h97j-4wj2-5jv8

Unspecified vulnerability in the VMware Descheduled Time Accounting driver in VMware…

LOW 19

Unspecified vulnerability in the VMware Descheduled Time Accounting driver in VMware Workstation 6.5.1 and earlier, VMware Player 2.5.1 and earlier, VMware ACE 2.5.1 and earlier, VMware Server 1.x before 1.0.9 build 1565…

CVSS 2.0MEDIUM 4.0 Local No auth Interaction — EPSS 0.00331 Published 2009-06-01 No fix listed

TI-2009-01179 CVE-2009-1244 · GHSA-3pp9-5q74-pq79

Unspecified vulnerability in the virtual machine display function in VMware Workstation…

LOW 34

Unspecified vulnerability in the virtual machine display function in VMware Workstation 6.5.1 and earlier; VMware Player 2.5.1 and earlier; VMware ACE 2.5.1 and earlier; VMware Server 1.x before 1.0.9 build 156507 and 2.…

CVSS 2.0MEDIUM 6.8 Local Low privileges Interaction — EPSS 0.02272 Published 2009-04-13 No fix listed

TI-2009-01088 CVE-2009-1147 · GHSA-pwvr-ph6m-wcv9

Unspecified vulnerability in vmci.sys in the Virtual Machine Communication Interface…

LOW 32

Unspecified vulnerability in vmci.sys in the Virtual Machine Communication Interface (VMCI) in VMware Workstation 6.5.1 and earlier, VMware Player 2.5.1 and earlier, VMware ACE 2.5.1 and earlier, and VMware Server 2.0.x…

CVSS 2.0HIGH 7.2 Local No auth Interaction — EPSS 0.00341 Published 2009-04-06 No fix listed

TI-2009-01087 CVE-2009-1146 · GHSA-xcc9-w59f-794q

Unspecified vulnerability in an ioctl in hcmon.sys in VMware Workstation 6.5.1 and…

LOW 22

Unspecified vulnerability in an ioctl in hcmon.sys in VMware Workstation 6.5.1 and earlier, VMware Player 2.5.1 and earlier, VMware ACE 2.5.1 and earlier, and VMware Server 1.0.x before 1.0.9 build 156507 and 2.0.x befor…

CVSS 2.0MEDIUM 4.9 Local No auth Interaction — EPSS 0.00355 Published 2009-04-06 No fix listed

TI-2009-00865 CVE-2009-0910 · GHSA-7f62-x26q-v865

Heap-based buffer overflow in the VNnc Codec in VMware Workstation 6.5.x before 6.5.2…

LOW 35

Heap-based buffer overflow in the VNnc Codec in VMware Workstation 6.5.x before 6.5.2 build 156735, VMware Player 2.5.x before 2.5.2 build 156735, VMware ACE 2.5.x before 2.5.2 build 156735, and VMware Server 2.0.x befor…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.02811 Published 2009-04-06 No fix listed CWE-119

TI-2009-00864 CVE-2009-0909 · GHSA-pwwh-5hg7-cxj9

Heap-based buffer overflow in the VNnc Codec in VMware Workstation 6.5.x before 6.5.2…

MEDIUM 48

Heap-based buffer overflow in the VNnc Codec in VMware Workstation 6.5.x before 6.5.2 build 156735, VMware Player 2.5.x before 2.5.2 build 156735, VMware ACE 2.5.x before 2.5.2 build 156735, and VMware Server 2.0.x befor…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.04627 Published 2009-04-06 No fix listed CWE-119

TI-2009-01026 CVE-2009-1072 · GHSA-pxr6-gr2r-cc6x

nfsd in the Linux kernel before 2.6.28.9 does not drop the CAP_MKNOD capability before…

LOW 23

nfsd in the Linux kernel before 2.6.28.9 does not drop the CAP_MKNOD capability before handling a user request in a thread, which allows local users to create device nodes, as demonstrated on a filesystem that has been e…

CVSS 2.0MEDIUM 4.9 Local No auth Interaction — EPSS 0.00427 Published 2009-03-25 Fixed CWE-16

Vulnerabilities

Filters