← Back

CVE-2010-1139

nvd nist
Published: Apr 12, 2010Modified: Apr 29, 2026

JSON object

Loading...
7.2
Vector
AV:L/AC:L/Au:N/C:C/I:C/A:C
Exploitability: 3.9 / Impact: 10.0
Source: NVD

Description

Format string vulnerability in vmrun in VMware VIX API 1.6.x, VMware Workstation 6.5.x before 6.5.4 build 246459, VMware Player 2.5.x before 2.5.4 build 246459, and VMware Server 2.x on Linux, and VMware Fusion 2.x before 2.0.7 build 246742, allows local users to gain privileges via format string specifiers in process metadata.

Affected (20)

Vmware
5 products
Workstation
Player
Server
Fusion
Vix Api
Configuration A
4 vulnerable
Vulnerable SoftwareAffected Versions
Vmware
Workstation
Version 6.5.0
Workstation
Version 6.5.1
Workstation
Version 6.5.2
Workstation
Version 6.5.3
Configuration B
4 vulnerable
Vulnerable SoftwareAffected Versions
Vmware
Player
Version 2.5.1
Player
Version 2.5.2
Player
Version 2.5
Player
Version 2.5.3
Configuration C
3 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Vmware
Server
Version 2.0.0
Server
Version 2.0.1
Server
Version 2.0.2
Running on/withPlatform Versions
Linux
Linux Kernel
All versions
Configuration D
7 vulnerable
Vulnerable SoftwareAffected Versions
Vmware
Fusion
Version 2.0.1
Fusion
Version 2.0.2
Fusion
Version 2.0.3
Fusion
Version 2.0.4
Fusion
Version 2.0.5
Fusion
Version 2.0.6
Fusion
Version 2.0
Configuration E
2 vulnerable
Vulnerable SoftwareAffected Versions
Vmware
Vix Api
Version 1.6.0
Vix Api
Version 1.6.1

Related CWEs

CWE-134
Use of Externally-Controlled Format String
The product uses a function that accepts a format string as an argument, but the format string originates from an external source.

References (22)

Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
PatchVendor Advisory
Source: cve@mitre.org
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory

Timeline

No history available yet.