FKIE_CVE-2010-1139

Vulnerability from fkie_nvd - Published: 2010-04-12 18:30 - Updated: 2025-04-11 00:51
Severity ?
Summary
Format string vulnerability in vmrun in VMware VIX API 1.6.x, VMware Workstation 6.5.x before 6.5.4 build 246459, VMware Player 2.5.x before 2.5.4 build 246459, and VMware Server 2.x on Linux, and VMware Fusion 2.x before 2.0.7 build 246742, allows local users to gain privileges via format string specifiers in process metadata.
References
cve@mitre.orghttp://archives.neohapsis.com/archives/bugtraq/2010-04/0077.html
cve@mitre.orghttp://archives.neohapsis.com/archives/fulldisclosure/2010-04/0121.html
cve@mitre.orghttp://lists.vmware.com/pipermail/security-announce/2010/000090.htmlPatch, Vendor Advisory
cve@mitre.orghttp://osvdb.org/63606
cve@mitre.orghttp://secunia.com/advisories/39201Vendor Advisory
cve@mitre.orghttp://secunia.com/advisories/39206Vendor Advisory
cve@mitre.orghttp://secunia.com/advisories/39215Vendor Advisory
cve@mitre.orghttp://security.gentoo.org/glsa/glsa-201209-25.xml
cve@mitre.orghttp://www.securityfocus.com/bid/39407
cve@mitre.orghttp://www.securitytracker.com/id?1023835
cve@mitre.orghttp://www.vmware.com/security/advisories/VMSA-2010-0007.htmlPatch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://archives.neohapsis.com/archives/bugtraq/2010-04/0077.html
af854a3a-2127-422b-91ae-364da2661108http://archives.neohapsis.com/archives/fulldisclosure/2010-04/0121.html
af854a3a-2127-422b-91ae-364da2661108http://lists.vmware.com/pipermail/security-announce/2010/000090.htmlPatch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://osvdb.org/63606
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/39201Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/39206Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/39215Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://security.gentoo.org/glsa/glsa-201209-25.xml
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/39407
af854a3a-2127-422b-91ae-364da2661108http://www.securitytracker.com/id?1023835
af854a3a-2127-422b-91ae-364da2661108http://www.vmware.com/security/advisories/VMSA-2010-0007.htmlPatch, Vendor Advisory
Impacted products
Vendor Product Version
vmware workstation 6.5.0
vmware workstation 6.5.1
vmware workstation 6.5.2
vmware workstation 6.5.3
vmware player 2.5
vmware player 2.5.1
vmware player 2.5.2
vmware player 2.5.3
linux linux_kernel *
vmware server 2.0.0
vmware server 2.0.1
vmware server 2.0.2
linux linux_kernel *
vmware fusion 2.0
vmware fusion 2.0.1
vmware fusion 2.0.2
vmware fusion 2.0.3
vmware fusion 2.0.4
vmware fusion 2.0.5
vmware fusion 2.0.6
vmware vix_api 1.6.0
vmware vix_api 1.6.1
To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:vmware:workstation:6.5.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "8E8F3BFF-676B-4E2C-98BA-DCA71E49060F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:vmware:workstation:6.5.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "B3E658DA-56E8-49F0-B486-4EF622B63627",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:vmware:workstation:6.5.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "541D77A2-99C5-4CDB-877F-7E83E1E3369E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:vmware:workstation:6.5.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "A6B53C0A-5A0C-4168-8AD3-F3E957AE8919",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:vmware:player:2.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "FE944A70-CB9C-4712-9802-509531396A02",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:vmware:player:2.5.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "252D2C0B-B89A-4C89-8D6B-6A8E58FCD8DC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:vmware:player:2.5.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "62DA49FA-6657-45B5-BF69-D3A03BA62A4D",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:vmware:player:2.5.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "949C3917-4D7E-4B51-A872-BFBECB4D2CB2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "155AD4FB-E527-4103-BCEF-801B653DEA37",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:vmware:server:2.0.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "5A2543D5-AE09-4E90-B27E-95075BE4ACBF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:vmware:server:2.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "E6CFDD84-A482-42C2-B43F-839F4D7F1130",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:vmware:server:2.0.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "9E565F23-AEEE-41A4-80EC-01961AD5560E",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "155AD4FB-E527-4103-BCEF-801B653DEA37",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:vmware:fusion:2.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "8E18541B-36B6-40A7-9749-FA47A10379C8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:vmware:fusion:2.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "55EBD95F-3DF7-49F3-A7AA-47085E0B7C88",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:vmware:fusion:2.0.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "A6DA47C9-3D1A-49A7-8976-AE05D6730673",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:vmware:fusion:2.0.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "692CC131-5C6C-4AD6-B85C-07DF21168BC8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:vmware:fusion:2.0.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "617EFBFF-D047-4A0B-ACB6-83B27710F6F8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:vmware:fusion:2.0.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "F1D0DF91-17E8-45D4-B625-737FE50C23CF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:vmware:fusion:2.0.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "A6C47EB8-8844-4D49-9246-008F7AE45C60",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:vmware:vix_api:1.6.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "F9FDEEE1-BC47-4EE6-A56B-C7626D554019",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:vmware:vix_api:1.6.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "98918409-9F58-4FBC-B5C1-4015B5E3C0FE",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Format string vulnerability in vmrun in VMware VIX API 1.6.x, VMware Workstation 6.5.x before 6.5.4 build 246459, VMware Player 2.5.x before 2.5.4 build 246459, and VMware Server 2.x on Linux, and VMware Fusion 2.x before 2.0.7 build 246742, allows local users to gain privileges via format string specifiers in process metadata."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad de formato de cadena en vmrun en VMware VIX API v1.6.x, VMware Workstation v6.5.x antes de v6.5.4 build 246459, VMware Player v2.5.x antes de v2.5.4 build 246.459, y VMware Server v2.x en Linux y VMware Fusion v2.x antes de v2.0.7 build 246.742, permite a usuarios locales conseguir privilegios a trav\u00e9s de especificadores de formato de cadenas en los metadatos de proceso."
    }
  ],
  "id": "CVE-2010-1139",
  "lastModified": "2025-04-11T00:51:21.963",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "LOCAL",
          "authentication": "NONE",
          "availabilityImpact": "COMPLETE",
          "baseScore": 7.2,
          "confidentialityImpact": "COMPLETE",
          "integrityImpact": "COMPLETE",
          "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
          "version": "2.0"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 10.0,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2010-04-12T18:30:00.587",
  "references": [
    {
      "source": "cve@mitre.org",
      "url": "http://archives.neohapsis.com/archives/bugtraq/2010-04/0077.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://archives.neohapsis.com/archives/fulldisclosure/2010-04/0121.html"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://lists.vmware.com/pipermail/security-announce/2010/000090.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://osvdb.org/63606"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/39201"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/39206"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/39215"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://security.gentoo.org/glsa/glsa-201209-25.xml"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/bid/39407"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securitytracker.com/id?1023835"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.vmware.com/security/advisories/VMSA-2010-0007.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://archives.neohapsis.com/archives/bugtraq/2010-04/0077.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://archives.neohapsis.com/archives/fulldisclosure/2010-04/0121.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://lists.vmware.com/pipermail/security-announce/2010/000090.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://osvdb.org/63606"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/39201"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/39206"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/39215"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://security.gentoo.org/glsa/glsa-201209-25.xml"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/39407"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securitytracker.com/id?1023835"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.vmware.com/security/advisories/VMSA-2010-0007.html"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-134"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.