Unscored severity · published Sep 28, 2010
CVE-2010-3277
The installer in VMware Workstation 7.x before 7.1.2 build 301548 and VMware Player 3.x before 3.1.2 build 301548 renders an index.htm file if present in the installation…
–
CVSS
0.3%
EPSS
No
On KEV
Description
The installer in VMware Workstation 7.x before 7.1.2 build 301548 and VMware Player 3.x before 3.1.2 build 301548 renders an index.htm file if present in the installation directory, which might allow local users to trigger unintended interpretation of web script or HTML by creating this file.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 23% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PL
Player · Vmware
3.0; 3.0.1; 3.1; 3.1.1 · source: NVD
WO
Workstation · Vmware
7.0; 7.0.1; 7.1; 7.1.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-3277
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-3277
lists.vmware.com
http://lists.vmware.com/pipermail/security-announce/2010/000105.html
Vendor Advisory
http://secunia.com/advisories/41574
securitytracker.com
http://securitytracker.com/id?1024481
Vendor Advisory
http://www.vmware.com/security/advisories/VMSA-2010-0014.html
Vendor Advisory
http://www.vupen.com/english/advisories/2010/2491
More from Player
9.8
CVE-2016-2077
VMware Workstation 11.x before 11.1.3 and VMware Player 7.x before 7.1.3 on Windows incorrectly access an executable file, which allows host OS users to gain host OS privileges…
9.8
CVE-2010-1205
Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in progressive applications, might allow remote attackers to execute arbitrary code via a PNG…
6.5
CVE-2010-2249
Memory leak in pngrutil.c in libpng before 1.2.44, and 1.4.x before 1.4.3, allows remote attackers to cause a denial of service (memory consumption and application crash) via a…
6.3
CVE-2015-6933
The VMware Tools HGFS (aka Shared Folders) implementation in VMware Workstation 11.x before 11.1.2, VMware Player 7.x before 7.1.2, VMware Fusion 7.x before 7.1.2, and VMware ESXi…
5.5
CVE-2006-3547
EMC VMware Player allows user-assisted attackers to cause a denial of service (unrecoverable application failure) via a long value of the ide1:0.fileName parameter in the .vmx…