9.3
CVSSv2

CVE-2009-0199

Published: 08/09/2009 Updated: 11/10/2018
CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6
VMScore: 828
Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Vulnerability Summary

Heap-based buffer overflow in the VMnc media codec in vmnc.dll in VMware Movie Decoder prior to 6.5.3 build 185404, VMware Workstation 6.5.x prior to 6.5.3 build 185404, VMware Player 2.5.x prior to 2.5.3 build 185404, and VMware ACE 2.5.x prior to 2.5.3 build 185404 on Windows might allow remote malicious users to execute arbitrary code via a video file with crafted dimensions (aka framebuffer parameters).

Vulnerable Product Search on Vulmon Subscribe to Product

vmware workstation 6.5

vmware workstation 6.5.0

vmware ace 2.5.0

vmware player 2.5

vmware player 2.5.1

vmware ace 2.5.1

vmware ace 2.5.2

vmware player 2.5.2

vmware player 2.5.2_build_156735

vmware movie decoder 6.5.3

vmware workstation 6.5.1

vmware workstation 6.5.2