Lucene search
HistoryOct 03, 2022 - 4:20 p.m.
CVE-2010-3277
vmware
workstation
player
installer
vulnerability
cve-2010-3277
nvd
web script
html
2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:L/Au:N/C:N/I:P/A:N
8.5 High
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.1%
The installer in VMware Workstation 7.x before 7.1.2 build 301548 and VMware Player 3.x before 3.1.2 build 301548 renders an index.htm file if present in the installation directory, which might allow local users to trigger unintended interpretation of web script or HTML by creating this file.
Affected configurations
Node
vmwareworkstationMatch7.0
ORvmwareworkstationMatch7.0.1
ORvmwareworkstationMatch7.1
ORvmwareworkstationMatch7.1.1
Node
vmwareplayerMatch3.0
ORvmwareplayerMatch3.0.1
ORvmwareplayerMatch3.1
ORvmwareplayerMatch3.1.1
Related
openvas
openvas
VMware Products Security Bypass Vulnerability (Linux) -Sep10
2010-10-01 00:00:00
VMware Products Security Bypass Vulnerability (Windows) -Sep10
2010-10-01 00:00:00
VMware Products Security Bypass Vulnerability (VMSA-2010-0014) - Windows
2010-10-01 00:00:00
cvelist
cvelist
CVE-2010-3277
2022-10-03 16:20:57
nvd
nvd
CVE-2010-3277
2010-09-28 18:00:03
prion
prion
Design/Logic Flaw
2010-09-28 18:00:00
kaspersky
kaspersky
KLA10386 Multiple vulnerabilities in VMware
2010-09-23 00:00:00
vmware
vmware
VMware Workstation, Player, and ACE address several security issues.
2010-09-23 00:00:00
VMware Workstation, Player, and ACE address several security issues.
2010-09-23 00:00:00
2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:L/Au:N/C:N/I:P/A:N
8.5 High
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.1%
Related for CVE-2010-3277