Unscored severity · published Dec 6, 2010
CVE-2010-4294
The frame decompression functionality in the VMnc media codec in VMware Movie Decoder before 6.5.5 build 328052 and 7.x before 7.1.2 build 301548, VMware Workstation 6.5.x before…
–
CVSS
5.8%
EPSS
No
On KEV
Description
The frame decompression functionality in the VMnc media codec in VMware Movie Decoder before 6.5.5 build 328052 and 7.x before 7.1.2 build 301548, VMware Workstation 6.5.x before 6.5.5 build 328052 and 7.x before 7.1.2 build 301548 on Windows, VMware Player 2.5.x before 2.5.5 build 246459 and 3.x before 3.1.2 build 301548 on Windows, and VMware Server 2.x on Windows does not properly validate an unspecified size field, which allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted video file.
Exploitation
Is it being used?
Exploit prediction (EPSS)5.8% · higher than 93% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MD
Movie Decoder · Vmware
through 6.5.5; 6.5.3; 6.5.4; 7.0; 7.1.2 · source: NVD
PL
Player · Vmware
2.5; 2.5.1; 2.5.2; 2.5.3; 2.5.4; 2.5.5; +5 more · source: NVD
SE
Server · Vmware
2.0.0; 2.0.1; 2.0.2 · source: NVD
WO
Workstation · Vmware
6.5.0; 6.5.1; 6.5.2; 6.5.3; 6.5.4; 6.5.5; +5 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-4294
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-4294
lists.vmware.com
http://lists.vmware.com/pipermail/security-announce/2010/000112.html
osvdb.org
http://osvdb.org/69596
Vendor Advisory
http://secunia.com/advisories/42482
www.securityfocus.com
http://www.securityfocus.com/archive/1/514995/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/45169
www.securitytracker.com
http://www.securitytracker.com/id?1024819
More from Movie Decoder
–
CVE-2012-4897
Untrusted search path vulnerability in the installer in VMware Movie Decoder before 9.0 allows local users to gain privileges via a Trojan horse executable file in the installer…
–
CVE-2009-1565
vmnc.dll in the VMnc media codec in VMware Movie Decoder before 6.5.4 Build 246459 on Windows, and the movie decoder in VMware Workstation 6.5.x before 6.5.4 build 246459, VMware…
–
CVE-2009-1564
Heap-based buffer overflow in vmnc.dll in the VMnc media codec in VMware Movie Decoder before 6.5.4 Build 246459 on Windows, and the movie decoder in VMware Workstation 6.5.x…
–
CVE-2009-2628
The VMnc media codec in vmnc.dll in VMware Movie Decoder before 6.5.3 build 185404, VMware Workstation 6.5.x before 6.5.3 build 185404, VMware Player 2.5.x before 2.5.3 build…
–
CVE-2009-0199
Heap-based buffer overflow in the VMnc media codec in vmnc.dll in VMware Movie Decoder before 6.5.3 build 185404, VMware Workstation 6.5.x before 6.5.3 build 185404, VMware Player…