9.3
CVSSv2

CVE-2009-2628

Published: 08/09/2009 Updated: 10/10/2018
CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6
VMScore: 828
Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Vulnerability Summary

The VMnc media codec in vmnc.dll in VMware Movie Decoder prior to 6.5.3 build 185404, VMware Workstation 6.5.x prior to 6.5.3 build 185404, VMware Player 2.5.x prior to 2.5.3 build 185404, and VMware ACE 2.5.x prior to 2.5.3 build 185404 on Windows does not properly handle certain small heights in video content, which might allow remote malicious users to execute arbitrary code via a crafted AVI file that triggers heap memory corruption.

Vulnerable Product Search on Vulmon Subscribe to Product

vmware workstation 6.5.2

vmware player 2.5

vmware ace 2.5.2

vmware workstation 6.5

vmware movie decoder 6.5.3

vmware workstation 6.5.0

vmware workstation 6.5.1

vmware ace 2.5.0

vmware ace 2.5.1

vmware player 2.5.1

vmware player 2.5.2