National Cyber Awareness System

Vulnerability Summary for CVE-2010-1141

Overview

VMware Tools in VMware Workstation 6.5.x before 6.5.4 build 246459; VMware Player 2.5.x before 2.5.4 build 246459; VMware ACE 2.5.x before 2.5.4 build 246459; VMware Server 2.x before 2.0.2 build 203138; VMware Fusion 2.x before 2.0.6 build 246742; VMware ESXi 3.5 and 4.0; and VMware ESX 2.5.5, 3.0.3, 3.5, and 4.0 does not properly access libraries, which allows user-assisted remote attackers to execute arbitrary code by tricking a Windows guest OS user into clicking on a file that is stored on a network share.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: CONFIRM

Name: http://www.vmware.com/security/advisories/VMSA-2010-0007.html

Type: Advisory; Patch Information

Hyperlink:http://www.vmware.com/security/advisories/VMSA-2010-0007.html

External Source: MLIST

Name: [security-announce] 20100409 VMSA-2010-0007 VMware hosted products, vCenter Server and ESX patches resolve multiple security issues

Type: Advisory; Patch Information

Hyperlink:http://lists.vmware.com/pipermail/security-announce/2010/000090.html

External Source: SECTRACK

Name: 1023833

Hyperlink:http://www.securitytracker.com/id?1023833

External Source: SECTRACK

Name: 1023832

Hyperlink:http://www.securitytracker.com/id?1023832

External Source: GENTOO

Name: GLSA-201209-25

Hyperlink:http://security.gentoo.org/glsa/glsa-201209-25.xml

External Source: SECUNIA

Name: 39206

Type: Advisory

Hyperlink:http://secunia.com/advisories/39206

External Source: SECUNIA

Name: 39198

Type: Advisory

Hyperlink:http://secunia.com/advisories/39198

External Source: OVAL

Name: oval:org.mitre.oval:def:7020

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:7020

External Source: FULLDISC

Name: 20100409 VMSA-2010-0007 VMware hosted products, vCenter Server and ESX patches resolve multiple security issues

Hyperlink:http://archives.neohapsis.com/archives/fulldisclosure/2010-04/0121.html

External Source: BUGTRAQ

Name: 20100409 VMSA-2010-0007 VMware hosted products, vCenter Server and ESX patches resolve multiple security issues

Hyperlink:http://archives.neohapsis.com/archives/bugtraq/2010-04/0077.html

References to Check Content

Identifier:oval:org.mitre.oval:def:7020

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:7020