CVE-2010-1138

CWE-200 — Information Exposure4 documents4 sources
Severity
5.0MEDIUM
EPSS
0.8%
top 26.50%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
5
Vmware ACEVmware FusionVmware Player+2 more
Timeline
PublishedApr 12
Latest updateMay 2

Description

The virtual networking stack in VMware Workstation 7.0 before 7.0.1 build 227600, VMware Workstation 6.5.x before 6.5.4 build 246459 on Windows, VMware Player 3.0 before 3.0.1 build 227600, VMware Player 2.5.x before 2.5.4 build 246459 on Windows, VMware ACE 2.6 before 2.6.1 build 227600 and 2.5.x before 2.5.4 build 246459, VMware Server 2.x, and VMware Fusion 3.0 before 3.0.1 build 232708 and 2.x before 2.0.7 build 246742 allows remote attackers to obtain sensitive information from memory on th…

CVSS vector

AV:N/AC:L/C:P/I:N/A:NExploitability: 10.0 | Impact: 2.9

Affected Packages5 packages

▶NVDvmware/player5 versions+4
▶NVDvmware/workstation5 versions+4
▶NVDvmware/fusion8 versions+7
▶NVDvmware/server2.0.0, 2.0.1, 2.0.2+2
▶NVDvmware/ace5 versions+4

Patches

Patch: lists.vmware.com ↗Patch: www.vmware.com ↗Patch: lists.vmware.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-vg5m-v3m5-vjcf: The virtual networking stack in VMware Workstation 7↗2022-05-02
▶
CVEList
CVE-2010-1138: The virtual networking stack in VMware Workstation 7↗2010-04-12
▶
CVE-2010-1138 (MEDIUM CVSS 5) | The virtual networking stack in VMw | cvebase.io