5
CVSSv2

CVE-2010-1138

Published: 12/04/2010 Updated: 15/05/2013
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Vulnerability Summary

The virtual networking stack in VMware Workstation 7.0 prior to 7.0.1 build 227600, VMware Workstation 6.5.x prior to 6.5.4 build 246459 on Windows, VMware Player 3.0 prior to 3.0.1 build 227600, VMware Player 2.5.x prior to 2.5.4 build 246459 on Windows, VMware ACE 2.6 prior to 2.6.1 build 227600 and 2.5.x prior to 2.5.4 build 246459, VMware Server 2.x, and VMware Fusion 3.0 prior to 3.0.1 build 232708 and 2.x prior to 2.0.7 build 246742 allows remote malicious users to obtain sensitive information from memory on the host OS by examining received network packets, related to interaction between the guest OS and the host vmware-vmx process.

Vulnerable Product Search on Vulmon Subscribe to Product

vmware workstation 7.0

vmware workstation 6.5.1

vmware workstation 6.5.2

vmware workstation 6.5.3

vmware workstation 6.5.0

vmware player 3.0

vmware player 2.5

vmware player 2.5.1

vmware player 2.5.2

vmware player 2.5.3

vmware ace 2.5.0

vmware ace 2.5.1

vmware ace 2.6

vmware ace 2.5.2

vmware ace 2.5.3

vmware server 2.0.1

vmware server 2.0.2

vmware server 2.0.0

vmware fusion 3.0

vmware fusion 2.0.1

vmware fusion 2.0.6

vmware fusion 2.0

vmware fusion 2.0.4

vmware fusion 2.0.5

vmware fusion 2.0.2

vmware fusion 2.0.3