CVE-2010-4296

CWE-863 — Incorrect Authorization3 documents3 sources
Severity
7.2HIGH
EPSS
0.1%
top 79.84%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
Vmware FusionVmware PlayerVmware Server+1 more
Timeline
PublishedDec 6
Latest updateMay 14

Description

vmware-mount in VMware Workstation 7.x before 7.1.2 build 301548 on Linux, VMware Player 3.1.x before 3.1.2 build 301548 on Linux, VMware Server 2.0.2 on Linux, and VMware Fusion 3.1.x before 3.1.2 build 332101 does not properly load libraries, which allows host OS users to gain privileges via vectors involving shared object files.

CVSS vector

AV:L/AC:L/C:C/I:C/A:CExploitability: 3.9 | Impact: 10.0

Affected Packages4 packages

▶NVDvmware/fusion3.1, 3.1.1, 3.1.2+2
▶NVDvmware/player3.1, 3.1.1, 3.1.2+2
▶NVDvmware/server2.0.2
▶NVDvmware/workstation5 versions+4

🔴Vulnerability Details

2
GHSA
GHSA-9p6f-fgq7-v5pr: vmware-mount in VMware Workstation 7↗2022-05-14
▶
CVEList
CVE-2010-4296: vmware-mount in VMware Workstation 7↗2010-12-06
▶