6.8

CVE-2009-1244

Unspecified vulnerability in the virtual machine display function in VMware Workstation 6.5.1 and earlier; VMware Player 2.5.1 and earlier; VMware ACE 2.5.1 and earlier; VMware Server 1.x before 1.0.9 build 156507 and 2.x before 2.0.1 build 156745; VMware Fusion before 2.0.4 build 159196; VMware ESXi 3.5; and VMware ESX 3.0.2, 3.0.3, and 3.5 allows guest OS users to execute arbitrary code on the host OS via unknown vectors, a different vulnerability than CVE-2008-4916.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
VMware ≫ Ace Version <= 2.5.1
VMware ≫ Ace Version1.0
VMware ≫ Ace Version1.0.0
VMware ≫ Ace Version1.0.1
VMware ≫ Ace Version1.0.2
VMware ≫ Ace Version1.0.3
VMware ≫ Ace Version1.0.4
VMware ≫ Ace Version1.0.5
VMware ≫ Ace Version1.0.6
VMware ≫ Ace Version1.0.7
VMware ≫ Ace Version2.0
VMware ≫ Ace Version2.0.1
VMware ≫ Ace Version2.0.2
VMware ≫ Ace Version2.0.3
VMware ≫ Ace Version2.0.4
VMware ≫ Ace Version2.0.5
VMware ≫ Ace Version2.5.0
VMware ≫ Esx Version3.0.2
VMware ≫ Esx Version3.0.3
VMware ≫ Esx Version3.5
VMware ≫ Esxi Version3.5
VMware ≫ Fusion Version <= 2.0.3
VMware ≫ Fusion Version1.0
VMware ≫ Fusion Version1.1
VMware ≫ Fusion Version1.1.1
VMware ≫ Fusion Version1.1.2
VMware ≫ Fusion Version1.1.3
VMware ≫ Fusion Version2.0
VMware ≫ Fusion Version2.0.1
VMware ≫ Fusion Version2.0.2
VMware ≫ Player Version <= 2.5.1
VMware ≫ Player Version1.0.0
VMware ≫ Player Version1.0.1
VMware ≫ Player Version1.0.2
VMware ≫ Player Version1.0.3
VMware ≫ Player Version1.0.4
VMware ≫ Player Version1.0.5
VMware ≫ Player Version1.0.6
VMware ≫ Player Version1.0.7
VMware ≫ Player Version1.0.8
VMware ≫ Player Version2.0
VMware ≫ Player Version2.0.1
VMware ≫ Player Version2.0.2
VMware ≫ Player Version2.0.3
VMware ≫ Player Version2.0.4
VMware ≫ Player Version2.0.5
VMware ≫ Player Version2.5
VMware ≫ Server Version1.0
VMware ≫ Server Version1.0.1
VMware ≫ Server Version1.0.2
VMware ≫ Server Version1.0.3
VMware ≫ Server Version1.0.4
VMware ≫ Server Version1.0.5
VMware ≫ Server Version1.0.6
VMware ≫ Server Version1.0.7
VMware ≫ Server Version1.0.8
VMware ≫ Server Version1.0.9
VMware ≫ Server Version2.0
VMware ≫ Workstation Version <= 6.5.1
VMware ≫ Workstation Version1.0.1
VMware ≫ Workstation Version1.0.2
VMware ≫ Workstation Version1.0.4
VMware ≫ Workstation Version1.0.5
VMware ≫ Workstation Version1.1
VMware ≫ Workstation Version1.1.1
VMware ≫ Workstation Version1.1.2
VMware ≫ Workstation Version2.0
VMware ≫ Workstation Version2.0.1
VMware ≫ Workstation Version3.2.1 Updatepatch1
VMware ≫ Workstation Version3.4
VMware ≫ Workstation Version4.0
VMware ≫ Workstation Version4.0.1
VMware ≫ Workstation Version4.0.2
VMware ≫ Workstation Version4.5.2
VMware ≫ Workstation Version5
VMware ≫ Workstation Version5.0.0
VMware ≫ Workstation Version5.5
VMware ≫ Workstation Version5.5.0
VMware ≫ Workstation Version5.5.1
VMware ≫ Workstation Version5.5.2
VMware ≫ Workstation Version5.5.3
VMware ≫ Workstation Version5.5.4
VMware ≫ Workstation Version5.5.5
VMware ≫ Workstation Version5.5.6
VMware ≫ Workstation Version5.5.7
VMware ≫ Workstation Version5.5.8
VMware ≫ Workstation Version6.0
VMware ≫ Workstation Version6.0.1
VMware ≫ Workstation Version6.0.2
VMware ≫ Workstation Version6.0.3
VMware ≫ Workstation Version6.0.4
VMware ≫ Workstation Version6.0.5
VMware ≫ Workstation Version6.5
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2% 0.781
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.8 3.1 10
AV:L/AC:L/Au:S/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://security.gentoo.org/glsa/glsa-201209-25.xml
http://www.vupen.com/english/advisories/2009/0944
http://lists.vmware.com/pipermail/security-announce/2009/000055.html
Patch
Vendor Advisory
http://osvdb.org/53634
http://www.securityfocus.com/archive/1/502615/100/0/threaded
http://www.securityfocus.com/bid/34471
Patch
http://www.securitytracker.com/id?1022031
http://www.vmware.com/security/advisories/VMSA-2009-0006.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/49834
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6065