6.9

CVE-2009-2267

Exploit
VMware Workstation 6.5.x before 6.5.3 build 185404, VMware Player 2.5.x before 2.5.3 build 185404, VMware ACE 2.5.x before 2.5.3 build 185404, VMware Server 1.x before 1.0.10 build 203137 and 2.x before 2.0.2 build 203138, VMware Fusion 2.x before 2.0.6 build 196839, VMware ESXi 3.5 and 4.0, and VMware ESX 2.5.5, 3.0.3, 3.5, and 4.0, when Virtual-8086 mode is used, do not properly set the exception code upon a page fault (aka #PF) exception, which allows guest OS users to gain privileges on the guest OS by specifying a crafted value for the cs register.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
VMware ≫ Ace Version2.5.0
VMware ≫ Ace Version2.5.1
VMware ≫ Ace Version2.5.2
VMware ≫ Esx Version2.5.5
VMware ≫ Esx Version3.0.3
VMware ≫ Esx Version3.5
VMware ≫ Esx Version4.0
VMware ≫ Esxi Version3.5
VMware ≫ Esxi Version4.0
VMware ≫ Fusion Version2.0
VMware ≫ Fusion Version2.0.1
VMware ≫ Fusion Version2.0.2
VMware ≫ Fusion Version2.0.3
VMware ≫ Fusion Version2.0.4
VMware ≫ Fusion Version2.0.5
VMware ≫ Player Version2.5
VMware ≫ Player Version2.5.1
VMware ≫ Player Version2.5.2
VMware ≫ Server Version1.0
VMware ≫ Server Version1.0.1
VMware ≫ Server Version1.0.2
VMware ≫ Server Version1.0.3
VMware ≫ Server Version1.0.4
VMware ≫ Server Version1.0.5
VMware ≫ Server Version1.0.6
VMware ≫ Server Version1.0.7
VMware ≫ Server Version1.0.8
VMware ≫ Server Version1.0.9
VMware ≫ Server Version2.0
VMware ≫ Server Version2.0 Updaterc2
VMware ≫ Server Version2.0.1
VMware ≫ Workstation Version6.5.0
VMware ≫ Workstation Version6.5.1
VMware ≫ Workstation Version6.5.2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.77% 0.752
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.9 3.4 10
AV:L/AC:M/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://security.gentoo.org/glsa/glsa-201209-25.xml
http://lists.vmware.com/pipermail/security-announce/2009/000069.html
Vendor Advisory
http://secunia.com/advisories/37172
Vendor Advisory
http://securitytracker.com/id?1023082
http://securitytracker.com/id?1023083
http://www.securityfocus.com/archive/1/507523/100/0/threaded
http://www.securityfocus.com/archive/1/507539/100/0/threaded
http://www.securityfocus.com/bid/36841
Exploit
http://www.vmware.com/security/advisories/VMSA-2009-0015.html
Patch
Vendor Advisory
http://www.vupen.com/english/advisories/2009/3062
Vendor Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8473