Lucene search

[email protected]NVD:CVE-2010-4297

HistoryDec 06, 2010 - 9:05 p.m.

CVE-2010-4297

2010-12-0621:05:49

CWE-20

[email protected]

web.nvd.nist.gov

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.6

Confidence

Low

EPSS

0.001

Percentile

36.6%

JSON

The VMware Tools update functionality in VMware Workstation 6.5.x before 6.5.5 build 328052 and 7.x before 7.1.2 build 301548; VMware Player 2.5.x before 2.5.5 build 328052 and 3.1.x before 3.1.2 build 301548; VMware Server 2.0.2; VMware Fusion 2.x before 2.0.8 build 328035 and 3.1.x before 3.1.2 build 332101; VMware ESXi 3.5, 4.0, and 4.1; and VMware ESX 3.0.3, 3.5, 4.0, and 4.1 allows host OS users to gain privileges on the guest OS via unspecified vectors, related to a “command injection” issue.

Affected configurations

Nvd

Node

vmwareworkstationMatch6.5.0

vmwareworkstationMatch6.5.1

vmwareworkstationMatch6.5.2

vmwareworkstationMatch6.5.3

vmwareworkstationMatch6.5.5

vmwareworkstationMatch7.0

vmwareworkstationMatch7.0.1

vmwareworkstationMatch7.1

vmwareworkstationMatch7.1.1

vmwareworkstationMatch7.1.2

Node

vmwareplayerMatch2.5

vmwareplayerMatch2.5.1

vmwareplayerMatch2.5.2

vmwareplayerMatch2.5.3

vmwareplayerMatch2.5.4

vmwareplayerMatch2.5.5

vmwareplayerMatch3.1

vmwareplayerMatch3.1.1

vmwareplayerMatch3.1.2

Node

vmwarefusionMatch2.0

vmwarefusionMatch2.0.1

vmwarefusionMatch2.0.2

vmwarefusionMatch2.0.3

vmwarefusionMatch2.0.4

vmwarefusionMatch2.0.5

vmwarefusionMatch2.0.6

vmwarefusionMatch2.0.7

vmwarefusionMatch2.0.8

vmwarefusionMatch3.1

vmwarefusionMatch3.1.1

vmwarefusionMatch3.1.2

vmwareserverMatch2.0.2

Node

vmwareesxiMatch3.5

vmwareesxiMatch4.0

vmwareesxiMatch4.1

Node

vmwareesxMatch3.5

vmwareesxMatch4.0

vmwareesxMatch4.1

VendorProductVersionCPE
vmwareworkstation6.5.0cpe:2.3:a:vmware:workstation:6.5.0:*:*:*:*:*:*:*
vmwareworkstation6.5.1cpe:2.3:a:vmware:workstation:6.5.1:*:*:*:*:*:*:*
vmwareworkstation6.5.2cpe:2.3:a:vmware:workstation:6.5.2:*:*:*:*:*:*:*
vmwareworkstation6.5.3cpe:2.3:a:vmware:workstation:6.5.3:*:*:*:*:*:*:*
vmwareworkstation6.5.5cpe:2.3:a:vmware:workstation:6.5.5:*:*:*:*:*:*:*
vmwareworkstation7.0cpe:2.3:a:vmware:workstation:7.0:*:*:*:*:*:*:*
vmwareworkstation7.0.1cpe:2.3:a:vmware:workstation:7.0.1:*:*:*:*:*:*:*
vmwareworkstation7.1cpe:2.3:a:vmware:workstation:7.1:*:*:*:*:*:*:*
vmwareworkstation7.1.1cpe:2.3:a:vmware:workstation:7.1.1:*:*:*:*:*:*:*
vmwareworkstation7.1.2cpe:2.3:a:vmware:workstation:7.1.2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
vmware	workstation	6.5.0	cpe:2.3:a:vmware:workstation:6.5.0:::::::*
vmware	workstation	6.5.1	cpe:2.3:a:vmware:workstation:6.5.1:::::::*
vmware	workstation	6.5.2	cpe:2.3:a:vmware:workstation:6.5.2:::::::*
vmware	workstation	6.5.3	cpe:2.3:a:vmware:workstation:6.5.3:::::::*
vmware	workstation	6.5.5	cpe:2.3:a:vmware:workstation:6.5.5:::::::*
vmware	workstation	7.0	cpe:2.3:a:vmware:workstation:7.0:::::::*
vmware	workstation	7.0.1	cpe:2.3:a:vmware:workstation:7.0.1:::::::*
vmware	workstation	7.1	cpe:2.3:a:vmware:workstation:7.1:::::::*
vmware	workstation	7.1.1	cpe:2.3:a:vmware:workstation:7.1.1:::::::*
vmware	workstation	7.1.2	cpe:2.3:a:vmware:workstation:7.1.2:::::::*