6.9

CVE-2009-2267

Exploit

VMware Workstation 6.5.x before 6.5.3 build 185404, VMware Player 2.5.x before 2.5.3 build 185404, VMware ACE 2.5.x before 2.5.3 build 185404, VMware Server 1.x before 1.0.10 build 203137 and 2.x before 2.0.2 build 203138, VMware Fusion 2.x before 2.0.6 build 196839, VMware ESXi 3.5 and 4.0, and VMware ESX 2.5.5, 3.0.3, 3.5, and 4.0, when Virtual-8086 mode is used, do not properly set the exception code upon a page fault (aka #PF) exception, which allows guest OS users to gain privileges on the guest OS by specifying a crafted value for the cs register.

Data is provided by the National Vulnerability Database (NVD)
VMware ≫ Ace Version2.5.0
VMware ≫ Ace Version2.5.1
VMware ≫ Ace Version2.5.2
VMware ≫ Esx Version2.5.5
VMware ≫ Esx Version3.0.3
VMware ≫ Esx Version3.5
VMware ≫ Esx Version4.0
VMware ≫ Esxi Version3.5
VMware ≫ Esxi Version4.0
VMware ≫ Fusion Version2.0
VMware ≫ Fusion Version2.0.1
VMware ≫ Fusion Version2.0.2
VMware ≫ Fusion Version2.0.3
VMware ≫ Fusion Version2.0.4
VMware ≫ Fusion Version2.0.5
VMware ≫ Player Version2.5
VMware ≫ Player Version2.5.1
VMware ≫ Player Version2.5.2
VMware ≫ Server Version1.0
VMware ≫ Server Version1.0.1
VMware ≫ Server Version1.0.2
VMware ≫ Server Version1.0.3
VMware ≫ Server Version1.0.4
VMware ≫ Server Version1.0.5
VMware ≫ Server Version1.0.6
VMware ≫ Server Version1.0.7
VMware ≫ Server Version1.0.8
VMware ≫ Server Version1.0.9
VMware ≫ Server Version2.0
VMware ≫ Server Version2.0 Updaterc2
VMware ≫ Server Version2.0.1
VMware ≫ Workstation Version6.5.0
VMware ≫ Workstation Version6.5.1
VMware ≫ Workstation Version6.5.2
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 3.23% 0.866
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 6.9 3.4 10
AV:L/AC:M/Au:N/C:C/I:C/A:C