CVE-2010-4294
published 2010-12-06CVE-2010-4294: The frame decompression functionality in the VMnc media codec in VMware Movie Decoder before 6.5.5 build 328052 and 7.x before 7.1.2 build 301548, VMware…
PriorityP349critical9.3CVSS 2.0
AVNACMAuNCCICAC
EPSS
5.84%
93.2th percentile
The frame decompression functionality in the VMnc media codec in VMware Movie Decoder before 6.5.5 build 328052 and 7.x before 7.1.2 build 301548, VMware Workstation 6.5.x before 6.5.5 build 328052 and 7.x before 7.1.2 build 301548 on Windows, VMware Player 2.5.x before 2.5.5 build 246459 and 3.x before 3.1.2 build 301548 on Windows, and VMware Server 2.x on Windows does not properly validate an unspecified size field, which allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted video file.
Affected
34 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| vmware | esxi | — | — |
| vmware | movie_decoder | <= 6.5.5 | — |
| vmware | movie_decoder | — | — |
| vmware | movie_decoder | — | — |
| vmware | movie_decoder | — | — |
| vmware | movie_decoder | — | — |
| vmware | player | — | — |
| vmware | player | — | — |
| vmware | player | — | — |
| vmware | player | — | — |
| vmware | player | — | — |
| vmware | player | — | — |
| vmware | player | — | — |
| vmware | player | — | — |
| vmware | player | — | — |
| vmware | player | — | — |
| vmware | player | — | — |
| vmware | server | — | — |
| vmware | server | — | — |
| vmware | server | — | — |
| vmware | vmware_fusion | — | — |
| vmware | vmware_tools | — | — |
| vmware | vmware_workstation | — | — |
| vmware | workstation | — | — |
| vmware | workstation | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-2q9v-9rr4-w95c: The frame decompression functionality in the VMnc media codec in VMware Movie Decoder before 6
ghsa_unreviewed·2022-05-14
CVE-2010-4294 [HIGH] CWE-94 GHSA-2q9v-9rr4-w95c: The frame decompression functionality in the VMnc media codec in VMware Movie Decoder before 6
The frame decompression functionality in the VMnc media codec in VMware Movie Decoder before 6.5.5 build 328052 and 7.x before 7.1.2 build 301548, VMware Workstation 6.5.x before 6.5.5 build 328052 and 7.x before 7.1.2 build 301548 on Windows, VMware Player 2.5.x before 2.5.5 build 246459 and 3.x before 3.1.2 build 301548 on Windows, and VMware Server 2.x on Windows does not properly validate an unspecified size field, which allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted video file.
VMware
VMware hosted products and ESX patches resolve multiple security issues
vendor_vmware·2010-12-02·CVSS 6.9
CVE-2010-4294 [MEDIUM] VMware hosted products and ESX patches resolve multiple security issues
VMSA-2010-0018: VMware hosted products and ESX patches resolve multiple security issues
a. VMware Workstation, Player and Fusion vmware-mount race condition The way temporary files are handled by the mounting process could result in a race condition. This issue could allow a local user on the host to elevate their privileges. VMware Workstation and Player running on Microsoft Windows are not affected. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2010-4295 to this issue . VMware would like to thank Dan Rosenberg for reporting this issue. The following table lists what action remediates the vulnerability (column 4) if a solution is available. VMware Product ============= Product Version ======== Running On ======= Replace with Apply Path =======
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://lists.vmware.com/pipermail/security-announce/2010/000112.htmlhttp://osvdb.org/69596http://secunia.com/advisories/42482http://www.securityfocus.com/archive/1/514995/100/0/threadedhttp://www.securityfocus.com/bid/45169http://www.securitytracker.com/id?1024819http://www.vmware.com/security/advisories/VMSA-2010-0018.htmlhttp://www.vupen.com/english/advisories/2010/3116http://lists.vmware.com/pipermail/security-announce/2010/000112.htmlhttp://osvdb.org/69596http://secunia.com/advisories/42482http://www.securityfocus.com/archive/1/514995/100/0/threadedhttp://www.securityfocus.com/bid/45169http://www.securitytracker.com/id?1024819http://www.vmware.com/security/advisories/VMSA-2010-0018.htmlhttp://www.vupen.com/english/advisories/2010/3116
2010-12-06
Published