CVE-2009-3282
published 2009-10-16CVE-2009-3282: Integer overflow in the vmx86 kernel extension in VMware Fusion before 2.0.6 build 196839 allows host OS users to cause a denial of service to the host OS via…
PriorityP427high7.8CVSS 2.0
AVNACLAuNCNINAC
EPSS
1.82%
78.6th percentile
Integer overflow in the vmx86 kernel extension in VMware Fusion before 2.0.6 build 196839 allows host OS users to cause a denial of service to the host OS via unspecified vectors.
Affected
13 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| vmware | esxi | — | — |
| vmware | fusion | <= 2.0.5 | — |
| vmware | fusion | — | — |
| vmware | fusion | — | — |
| vmware | fusion | — | — |
| vmware | fusion | — | — |
| vmware | fusion | — | — |
| vmware | fusion | — | — |
| vmware | fusion | — | — |
| vmware | fusion | — | — |
| vmware | fusion | — | — |
| vmware | fusion | — | — |
| vmware | vmware_fusion | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VMware
VMware Fusion resolves two security issues
vendor_vmware·2009-10-01·CVSS 7.2
CVE-2009-3281 [HIGH] VMware Fusion resolves two security issues
VMSA-2009-0013: VMware Fusion resolves two security issues
VMware Fusion is a product that allows you to seamlessly run your favorite Windows applications on any Intel-based Mac. a. Kernel code execution vulnerability An file permission problem in the vmx86 kernel extension allows for executing arbitrary code in the host system kernel context by an unprivileged user on the host system. VMware would like to thank Neil Kettle of Convergent Network Solutions for reporting this issue to us. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2009-3281 to this issue. b. Kernel denial of service vulnerability An integer overflow vulnerability in the vmx86 kernel extension allows for a denial of service of the host by an unprivileged user on the host system
GHSA
GHSA-pvmh-7h9v-f5xr: Integer overflow in the vmx86 kernel extension in VMware Fusion before 2
ghsa_unreviewed·2022-05-02
CVE-2009-3282 [HIGH] GHSA-pvmh-7h9v-f5xr: Integer overflow in the vmx86 kernel extension in VMware Fusion before 2
Integer overflow in the vmx86 kernel extension in VMware Fusion before 2.0.6 build 196839 allows host OS users to cause a denial of service to the host OS via unspecified vectors.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://lists.vmware.com/pipermail/security-announce/2009/000066.htmlhttp://secunia.com/advisories/36928http://securitytracker.com/id?1022981http://www.vmware.com/security/advisories/VMSA-2009-0013.htmlhttp://www.vupen.com/english/advisories/2009/2811http://lists.vmware.com/pipermail/security-announce/2009/000066.htmlhttp://secunia.com/advisories/36928http://securitytracker.com/id?1022981http://www.vmware.com/security/advisories/VMSA-2009-0013.htmlhttp://www.vupen.com/english/advisories/2009/2811
2009-10-16
Published