Unscored severity · published Apr 12, 2010
CVE-2009-3732
Format string vulnerability in vmware-vmrc.exe build 158248 in VMware Remote Console (aka VMrc) allows remote attackers to execute arbitrary code via unspecified vectors
–
CVSS
16.2%
EPSS
No
On KEV
Description
Format string vulnerability in vmware-vmrc.exe build 158248 in VMware Remote Console (aka VMrc) allows remote attackers to execute arbitrary code via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)16.2% · higher than 97% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AC
Ace · Vmware
2.5.0 before 2.5.4; 2.6 · source: NVD
PL
Player · Vmware
2.5.0 before 2.5.4; 3.0 · source: NVD
SE
Server · Vmware
2.0.0 through 2.0.2 · source: NVD
WO
Workstation · Vmware
6.5.0 before 6.5.4; 7.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-3732
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-3732
Broken Link
http://archives.neohapsis.com/archives/bugtraq/2010-04/0077.html
Broken Link
http://archives.neohapsis.com/archives/fulldisclosure/2010-04/0121.html
Mailing List
http://lists.vmware.com/pipermail/security-announce/2010/000090.html
Not Applicable
http://secunia.com/advisories/39110
Third Party Advisory
http://security.gentoo.org/glsa/glsa-201209-25.xml
Patch
http://www.vmware.com/security/advisories/VMSA-2010-0007.html
More from Ace
–
CVE-2009-4811
VMware Authentication Daemon 1.0 in vmware-authd.exe in the VMware Authorization Service in VMware Workstation 7.0 before 7.0.1 build 227600 and 6.5.x before 6.5.4 build 246459,…
–
CVE-2010-1142
VMware Tools in VMware Workstation 6.5.x before 6.5.4 build 246459; VMware Player 2.5.x before 2.5.4 build 246459; VMware ACE 2.5.x before 2.5.4 build 246459; VMware Server 2.x…
–
CVE-2010-1141
VMware Tools in VMware Workstation 6.5.x before 6.5.4 build 246459; VMware Player 2.5.x before 2.5.4 build 246459; VMware ACE 2.5.x before 2.5.4 build 246459; VMware Server 2.x…
–
CVE-2010-1138
The virtual networking stack in VMware Workstation 7.0 before 7.0.1 build 227600, VMware Workstation 6.5.x before 6.5.4 build 246459 on Windows, VMware Player 3.0 before 3.0.1…
–
CVE-2009-2267
VMware Workstation 6.5.x before 6.5.3 build 185404, VMware Player 2.5.x before 2.5.3 build 185404, VMware ACE 2.5.x before 2.5.3 build 185404, VMware Server 1.x before 1.0.10…