6.9

CVE-2009-2267

Exploit
VMware Workstation 6.5.x before 6.5.3 build 185404, VMware Player 2.5.x before 2.5.3 build 185404, VMware ACE 2.5.x before 2.5.3 build 185404, VMware Server 1.x before 1.0.10 build 203137 and 2.x before 2.0.2 build 203138, VMware Fusion 2.x before 2.0.6 build 196839, VMware ESXi 3.5 and 4.0, and VMware ESX 2.5.5, 3.0.3, 3.5, and 4.0, when Virtual-8086 mode is used, do not properly set the exception code upon a page fault (aka #PF) exception, which allows guest OS users to gain privileges on the guest OS by specifying a crafted value for the cs register.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
VMware ≫ Ace Version 2.5.0
VMware ≫ Ace Version 2.5.1
VMware ≫ Ace Version 2.5.2
VMware ≫ Esx Version 2.5.5
VMware ≫ Esx Version 3.0.3
VMware ≫ Esx Version 3.5
VMware ≫ Esx Version 4.0
VMware ≫ Esxi Version 3.5
VMware ≫ Esxi Version 4.0
VMware ≫ Fusion Version 2.0
VMware ≫ Fusion Version 2.0.1
VMware ≫ Fusion Version 2.0.2
VMware ≫ Fusion Version 2.0.3
VMware ≫ Fusion Version 2.0.4
VMware ≫ Fusion Version 2.0.5
VMware ≫ Player Version 2.5
VMware ≫ Player Version 2.5.1
VMware ≫ Player Version 2.5.2
VMware ≫ Server Version 1.0
VMware ≫ Server Version 1.0.1
VMware ≫ Server Version 1.0.2
VMware ≫ Server Version 1.0.3
VMware ≫ Server Version 1.0.4
VMware ≫ Server Version 1.0.5
VMware ≫ Server Version 1.0.6
VMware ≫ Server Version 1.0.7
VMware ≫ Server Version 1.0.8
VMware ≫ Server Version 1.0.9
VMware ≫ Server Version 2.0
VMware ≫ Server Version 2.0 Update rc2
VMware ≫ Server Version 2.0.1
VMware ≫ Workstation Version 6.5.0
VMware ≫ Workstation Version 6.5.1
VMware ≫ Workstation Version 6.5.2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.76% 0.753
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.9 3.4 10
AV:L/AC:M/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://security.gentoo.org/glsa/glsa-201209-25.xml
http://lists.vmware.com/pipermail/security-announce/2009/000069.html
Vendor Advisory
http://secunia.com/advisories/37172
Vendor Advisory
http://securitytracker.com/id?1023082
http://securitytracker.com/id?1023083
http://www.securityfocus.com/archive/1/507523/100/0/threaded
http://www.securityfocus.com/archive/1/507539/100/0/threaded
http://www.securityfocus.com/bid/36841
Exploit
http://www.vmware.com/security/advisories/VMSA-2009-0015.html
Patch
Vendor Advisory
http://www.vupen.com/english/advisories/2009/3062
Vendor Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8473