VMware CVEs — known vulnerabilities

Workstation HIGH 8.5

CVE-2010-1142

VMware Tools in VMware Workstation 6.5.x before 6.5.4 build 246459; VMware Player 2.5.x before 2.5.4 build 246459; VMware ACE 2.5.x before 2.5.4 buil…

Patch available

Fix from $1,950 2010-04-12

Workstation HIGH 7.2

CVE-2010-1139

Format string vulnerability in vmrun in VMware VIX API 1.6.x, VMware Workstation 6.5.x before 6.5.4 build 246459, VMware Player 2.5.x before 2.5.4 bu…

Patch available

Fix from $1,950 2010-04-12

Workstation MEDIUM 6.9

CVE-2010-1140

The USB service in VMware Workstation 7.0 before 7.0.1 build 227600 and VMware Player 3.0 before 3.0.1 build 227600 on Windows might allow host OS us…

Patch available

Fix from $1,600 2010-04-12

Workstation MEDIUM 5.0

CVE-2010-1138

The virtual networking stack in VMware Workstation 7.0 before 7.0.1 build 227600, VMware Workstation 6.5.x before 6.5.4 build 246459 on Windows, VMwa…

Patch available

Fix from $1,600 2010-04-12

Virtualcenter HIGH 7.5

CVE-2010-0686

WebAccess in VMware VirtualCenter 2.0.2 and 2.5, VMware Server 2.0, and VMware ESX 3.0.3 and 3.5 allows remote attackers to leverage proxy-server fun…

Patch available

Fix from $1,950 2010-04-01

Ace MEDIUM 6.9

CVE-2009-2267

VMware Workstation 6.5.x before 6.5.3 build 185404, VMware Player 2.5.x before 2.5.3 build 185404, VMware ACE 2.5.x before 2.5.3 build 185404, VMware…

Patch available

Fix from $1,600 2009-11-02

Esx MEDIUM 5.0

CVE-2009-3733EPSS 83%

Directory traversal vulnerability in VMware Server 1.x before 1.0.10 build 203137 and 2.x before 2.0.2 build 203138 on Linux, VMware ESXi 3.5, and VM…

Patch available

Fix from $1,600 2009-11-02

Fusion HIGH 7.8

CVE-2009-3282

Integer overflow in the vmx86 kernel extension in VMware Fusion before 2.0.6 build 196839 allows host OS users to cause a denial of service to the ho…

Fix: after 2.0.5

Fix from $1,950 2009-10-16

Fusion HIGH 7.2

CVE-2009-3281

The vmx86 kernel extension in VMware Fusion before 2.0.6 build 196839 does not use correct file permissions, which allows host OS users to gain privi…

Fix: after 2.0.5

Fix from $1,950 2009-10-16

Ace MEDIUM 5.0

CVE-2009-3707EPSS 11%

VMware Authentication Daemon 1.0 in vmware-authd.exe in the VMware Authorization Service in VMware Workstation 7.0 before 7.0.1 build 227600 and 6.5.…

No fix yet

Fix from $1,600 2009-10-16

Ace HIGH 9.3

CVE-2009-0199EPSS 5%

Heap-based buffer overflow in the VMnc media codec in vmnc.dll in VMware Movie Decoder before 6.5.3 build 185404, VMware Workstation 6.5.x before 6.5…

Patch available

Fix from $1,950 2009-09-08

Ace HIGH 9.3

CVE-2009-2628EPSS 6%

The VMnc media codec in vmnc.dll in VMware Movie Decoder before 6.5.3 build 185404, VMware Workstation 6.5.x before 6.5.3 build 185404, VMware Player…

Patch available

Fix from $1,950 2009-09-08

Studio MEDIUM 5.0

CVE-2009-2968

Directory traversal vulnerability in a support component in the web interface in VMware Studio 2.0 public beta before build 1017-185256 allows remote…

Mitigation only

Fix from $1,600 2009-09-02

Ace MEDIUM 6.8

CVE-2009-1244

Unspecified vulnerability in the virtual machine display function in VMware Workstation 6.5.1 and earlier; VMware Player 2.5.1 and earlier; VMware AC…

Fix: after 6.5.1

Fix from $1,600 2009-04-13

Ace HIGH 9.3

CVE-2009-0909

Heap-based buffer overflow in the VNnc Codec in VMware Workstation 6.5.x before 6.5.2 build 156735, VMware Player 2.5.x before 2.5.2 build 156735, VM…

Patch available

Fix from $1,950 2009-04-06

Ace HIGH 7.2

CVE-2009-1147

Unspecified vulnerability in vmci.sys in the Virtual Machine Communication Interface (VMCI) in VMware Workstation 6.5.1 and earlier, VMware Player 2.…

Mitigation only

Fix from $1,950 2009-04-06

Ace MEDIUM 6.8

CVE-2009-0910

Heap-based buffer overflow in the VNnc Codec in VMware Workstation 6.5.x before 6.5.2 build 156735, VMware Player 2.5.x before 2.5.2 build 156735, VM…

Patch available

Fix from $1,600 2009-04-06

Ace MEDIUM 6.4

CVE-2009-0908

Unspecified vulnerability in the ACE shared folders implementation in the VMware Host Guest File System (HGFS) shared folders feature in VMware ACE 2…

Fix: after 2.5.1

Fix from $1,600 2009-04-06

Esx HIGH 7.8

CVE-2009-0034

parse.c in sudo 1.6.9p17 through 1.6.9p19 does not properly interpret a system group (aka %group) in the sudoers file during authorization decisions …

Mitigation only

Fix from $1,950 2009-01-30

Ace MEDIUM 5.0

CVE-2009-0177EPSS 9%

vmwarebase.dll, as used in the vmware-authd service (aka vmware-authd.exe), in VMware Workstation 6.5.1 build 126130, 6.5.1 and earlier; VMware Playe…

Fix: after 6.51

Fix from $1,600 2009-01-20

Esx HIGH 7.2

CVE-2008-4917

Unspecified vulnerability in VMware Workstation 5.5.8 and earlier, and 6.0.5 and earlier 6.x versions; VMware Player 1.0.8 and earlier, and 2.0.5 and…

Fix: after 6.0.5

Fix from $1,950 2008-12-09

Esx HIGH 9.3

CVE-2008-4281

Directory traversal vulnerability in VMWare ESXi 3.5 before ESXe350-200810401-O-UG and ESX 3.5 before ESX350-200810201-UG allows administrators with …

Fix: after 3.5

Fix from $1,950 2008-11-10

Ace MEDIUM 6.9

CVE-2008-4915

The CPU hardware emulation in VMware Workstation 6.0.5 and earlier and 5.5.8 and earlier; Player 2.0.x through 2.0.5 and 1.0.x through 1.0.8; ACE 2.0…

Fix: after 6.0.5

Fix from $1,600 2008-11-10

Player MEDIUM 6.8

CVE-2008-4279

The CPU hardware emulation for 64-bit guest operating systems in VMware Workstation 6.0.x before 6.0.5 build 109488 and 5.x before 5.5.8 build 108000…

Fix: 1.0.8 / 2.0.5+

Fix from $1,600 2008-10-06

Ace HIGH 10.0

CVE-2008-3691

Unspecified vulnerability in a certain ActiveX control in VMware Workstation 5.5.x before 5.5.8 build 108000, VMware Workstation 6.0.x before 6.0.5 b…

Fix: 1.0.7 / 1.0.8+