[Forgot Password]
Login  Register Subscribe

23631

 
 

115038

 
 

96125

 
 

909

 
 

78020

 
 

109

Paid content will be excluded from the download.


Download | Alert*
CVE
view XML

CVE-2009-0909

Date: (C)2009-04-06   (M)2017-10-04
 
CVSS Score: 9.3Access Vector: NETWORK
Exploitability Subscore: 8.6Access Complexity: MEDIUM
Impact Subscore: 10.0Authentication: NONE
 Confidentiality: COMPLETE
 Integrity: COMPLETE
 Availability: COMPLETE











Heap-based buffer overflow in the VNnc Codec in VMware Workstation 6.5.x before 6.5.2 build 156735, VMware Player 2.5.x before 2.5.2 build 156735, VMware ACE 2.5.x before 2.5.2 build 156735, and VMware Server 2.0.x before 2.0.1 build 156745 allows remote attackers to execute arbitrary code via a crafted web page or video file, aka ZDI-CAN-435.

Reference:
SECTRACK-1021974
http://seclists.org/fulldisclosure/2009/Apr/0036.html
BID-34373
ADV-2009-0944
GLSA-201209-25
IAVM:2009-B-0015
http://lists.vmware.com/pipermail/security-announce/2009/000054.html
http://www.vmware.com/security/advisories/VMSA-2009-0005.html

CPE    2
cpe:/a:vmware:workstation:6.5.1
cpe:/a:vmware:player:2.5.1
CWE    1
CWE-119

© 2013 SecPod Technologies