CVE-2009-3732

HIGH
New! CVE Severity Now Using CVSS v3

The calculated severity for CVEs has been updated to use CVSS v3 by default. CVEs that do not have a CVSS v3 score will fall back CVSS v2 for calculating severity. Severity display preferences can be toggled in the settings dropdown.

Description

Format string vulnerability in vmware-vmrc.exe build 158248 in VMware Remote Console (aka VMrc) allows remote attackers to execute arbitrary code via unspecified vectors.

References

http://archives.neohapsis.com/archives/bugtraq/2010-04/0077.html

http://archives.neohapsis.com/archives/fulldisclosure/2010-04/0121.html

http://lists.vmware.com/pipermail/security-announce/2010/000090.html

http://secunia.com/advisories/39110

http://security.gentoo.org/glsa/glsa-201209-25.xml

http://www.vmware.com/security/advisories/VMSA-2010-0007.html

Details

Source: MITRE

Published: 2010-04-12

Updated: 2013-05-15

Type: CWE-134

Risk Information

CVSS v2

Base Score: 10

Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Impact Score: 10

Exploitability Score: 10

Severity: HIGH

Tenable Plugins

View all (4 total)

IDNameProductFamilySeverity
89739VMware ESX Multiple Vulnerabilities (VMSA-2010-0007) (remote check)NessusVMware ESX Local Security Checks
critical
62383GLSA-201209-25 : VMware Player, Server, Workstation: Multiple vulnerabilitiesNessusGentoo Local Security Checks
medium
56246VMSA-2010-0007 : VMware hosted products, vCenter Server and ESX patches resolve multiple security issuesNessusVMware ESX Local Security Checks
critical
45541VMware Products Multiple Vulnerabilities (VMSA-2010-0007)NessusWindows
high