PT-2009-3497
CVE-2009-0909
·
تاريخ النشر
2009-04-06
·
تاريخ التحديث
2017-09-29
الوصف من
CVSS 2.0
9.3
عاليةالمقاييسAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
VMware Workstation versions 6.5.x before 6.5.2 build 156735
VMware Player versions 2.5.x before 2.5.2 build 156735
VMware ACE versions 2.5.x before 2.5.2 build 156735
VMware Server versions 2.0.x before 2.0.1 build 156745
Description
A heap-based buffer overflow in the VNnc Codec allows remote attackers to execute arbitrary code via a crafted web page or video file.
Recommendations
For VMware Workstation versions 6.5.x before 6.5.2 build 156735, update to version 6.5.2 build 156735 or later.
For VMware Player versions 2.5.x before 2.5.2 build 156735, update to version 2.5.2 build 156735 or later.
For VMware ACE versions 2.5.x before 2.5.2 build 156735, update to version 2.5.2 build 156735 or later.
For VMware Server versions 2.0.x before 2.0.1 build 156745, update to version 2.0.1 build 156745 or later.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾