CVE-2010-4296

Опубликовано: 06 дек. 2010

Источник: nvd

CVSS2: 7.2

EPSS Низкий

Описание

vmware-mount in VMware Workstation 7.x before 7.1.2 build 301548 on Linux, VMware Player 3.1.x before 3.1.2 build 301548 on Linux, VMware Server 2.0.2 on Linux, and VMware Fusion 3.1.x before 3.1.2 build 332101 does not properly load libraries, which allows host OS users to gain privileges via vectors involving shared object files.

Ссылки

http://lists.vmware.com/pipermail/security-announce/2010/000112.html
Mailing List
Vendor Advisory
http://osvdb.org/69584
Broken Link
http://secunia.com/advisories/42453
Broken Link
Vendor Advisory
http://secunia.com/advisories/42482
Broken Link
Vendor Advisory
http://www.securityfocus.com/archive/1/514995/100/0/threaded
Broken Link
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/45168
Broken Link
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id?1024819
Broken Link
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id?1024820
Broken Link
Third Party Advisory
VDB Entry
http://www.vmware.com/security/advisories/VMSA-2010-0018.html
Vendor Advisory
http://www.vupen.com/english/advisories/2010/3116
Broken Link
Third Party Advisory
http://lists.vmware.com/pipermail/security-announce/2010/000112.html
Mailing List
Vendor Advisory
http://osvdb.org/69584
Broken Link
http://secunia.com/advisories/42453
Broken Link
Vendor Advisory
http://secunia.com/advisories/42482
Broken Link
Vendor Advisory
http://www.securityfocus.com/archive/1/514995/100/0/threaded
Broken Link
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/45168
Broken Link
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id?1024819
Broken Link
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id?1024820
Broken Link
Third Party Advisory
VDB Entry
http://www.vmware.com/security/advisories/VMSA-2010-0018.html
Vendor Advisory
http://www.vupen.com/english/advisories/2010/3116
Broken Link
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:a:vmware:workstation:7.0:*:*:*:*:*:*:*

cpe:2.3:a:vmware:workstation:7.0.1:*:*:*:*:*:*:*

cpe:2.3:a:vmware:workstation:7.1:*:*:*:*:*:*:*

cpe:2.3:a:vmware:workstation:7.1.1:*:*:*:*:*:*:*

cpe:2.3:a:vmware:workstation:7.1.2:*:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*

Конфигурация 2

Одновременно

Одно из

cpe:2.3:a:vmware:player:3.1:*:*:*:*:*:*:*

cpe:2.3:a:vmware:player:3.1.1:*:*:*:*:*:*:*

cpe:2.3:a:vmware:player:3.1.2:*:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*

Конфигурация 3

Одновременно

cpe:2.3:a:vmware:server:2.0.2:*:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*

Конфигурация 4

Одновременно

Одно из

cpe:2.3:a:vmware:fusion:3.1:*:*:*:*:*:*:*

cpe:2.3:a:vmware:fusion:3.1.1:*:*:*:*:*:*:*

cpe:2.3:a:vmware:fusion:3.1.2:*:*:*:*:*:*:*

cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*

EPSS

Процентиль: 20%

0.00065

Низкий

7.2 High

CVSS2

Дефекты

CWE-863

Связанные уязвимости

GHSA-9p6f-fgq7-v5pr

github

больше 3 лет назад

EPSS

Процентиль: 20%

0.00065

Низкий

7.2 High

CVSS2

Дефекты

CWE-863