CVE Vulnerabilities

CVE-2010-1141

Published: Apr 12, 2010 | Modified: Sep 19, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
8.5 HIGH
AV:N/AC:M/Au:S/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu

VMware Tools in VMware Workstation 6.5.x before 6.5.4 build 246459; VMware Player 2.5.x before 2.5.4 build 246459; VMware ACE 2.5.x before 2.5.4 build 246459; VMware Server 2.x before 2.0.2 build 203138; VMware Fusion 2.x before 2.0.6 build 246742; VMware ESXi 3.5 and 4.0; and VMware ESX 2.5.5, 3.0.3, 3.5, and 4.0 does not properly access libraries, which allows user-assisted remote attackers to execute arbitrary code by tricking a Windows guest OS user into clicking on a file that is stored on a network share.

Affected Software

Name Vendor Start Version End Version
Workstation Vmware 6.5.0 (including) 6.5.0 (including)
Workstation Vmware 6.5.1 (including) 6.5.1 (including)
Workstation Vmware 6.5.2 (including) 6.5.2 (including)
Workstation Vmware 6.5.3 (including) 6.5.3 (including)

References