← Back

CVE-2010-1138

nvd nist
Published: Apr 12, 2010Modified: Apr 29, 2026

JSON object

Loading...
5.0
Vector
AV:N/AC:L/Au:N/C:P/I:N/A:N
Exploitability: 10.0 / Impact: 2.9
Source: NVD

Description

The virtual networking stack in VMware Workstation 7.0 before 7.0.1 build 227600, VMware Workstation 6.5.x before 6.5.4 build 246459 on Windows, VMware Player 3.0 before 3.0.1 build 227600, VMware Player 2.5.x before 2.5.4 build 246459 on Windows, VMware ACE 2.6 before 2.6.1 build 227600 and 2.5.x before 2.5.4 build 246459, VMware Server 2.x, and VMware Fusion 3.0 before 3.0.1 build 232708 and 2.x before 2.0.7 build 246742 allows remote attackers to obtain sensitive information from memory on the host OS by examining received network packets, related to interaction between the guest OS and the host vmware-vmx process.

Affected (26)

Vmware
5 products
Workstation
Player
Ace
Server
Fusion
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Workstation
Version 7.0
Configuration B
4 vulnerable
Vulnerable SoftwareAffected Versions
Vmware
Workstation
Version 6.5.0
Workstation
Version 6.5.1
Workstation
Version 6.5.2
Workstation
Version 6.5.3
Configuration C
1 vulnerable
Vulnerable SoftwareAffected Versions
Player
Version 3.0
Configuration D
4 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Vmware
Player
Version 2.5.1
Player
Version 2.5.2
Player
Version 2.5.3
Player
Version 2.5
Running on/withPlatform Versions
Microsoft
Windows
All versions
Configuration E
5 vulnerable
Vulnerable SoftwareAffected Versions
Vmware
Ace
Version 2.5.0
Ace
Version 2.5.1
Ace
Version 2.5.2
Ace
Version 2.5.3
Ace
Version 2.6
Configuration F
3 vulnerable
Vulnerable SoftwareAffected Versions
Vmware
Server
Version 2.0.0
Server
Version 2.0.1
Server
Version 2.0.2
Configuration G
8 vulnerable
Vulnerable SoftwareAffected Versions
Vmware
Fusion
Version 2.0.1
Fusion
Version 2.0.2
Fusion
Version 2.0.3
Fusion
Version 2.0.4
Fusion
Version 2.0.5
Fusion
Version 2.0.6
Fusion
Version 2.0
Fusion
Version 3.0

Related CWEs

CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (22)

Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
PatchVendor Advisory
Source: cve@mitre.org
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory

Timeline

No history available yet.