CVE-2011-3868

high
New! CVE Severity Now Using CVSS v3

The calculated severity for CVEs has been updated to use CVSS v3 by default. CVEs that do not have a CVSS v3 score will fall back CVSS v2 for calculating severity. Severity display preferences can be toggled in the settings dropdown.

Description

Buffer overflow in VMware Workstation 7.x before 7.1.5, VMware Player 3.x before 3.1.5, VMware Fusion 3.1.x before 3.1.3, and VMware AMS allows remote attackers to execute arbitrary code via a crafted UDF filesystem in an ISO image.

References

http://osvdb.org/76060

http://secunia.com/advisories/46241

http://security.gentoo.org/glsa/glsa-201209-25.xml

http://www.securityfocus.com/archive/1/520005/100/0/threaded

http://www.securityfocus.com/bid/49942

http://www.securitytracker.com/id?1026139

http://www.vmware.com/security/advisories/VMSA-2011-0011.html

Details

Source: MITRE

Published: 2011-10-07

Updated: 2018-10-09

Type: CWE-119

Risk Information

CVSS v2

Base Score: 9.3

Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Impact Score: 10

Exploitability Score: 8.6

Severity: HIGH

Tenable Plugins

View all (2 total)

IDNameProductFamilySeverity
62383GLSA-201209-25 : VMware Player, Server, Workstation: Multiple vulnerabilitiesNessusGentoo Local Security Checks
medium
54974VMware Fusion < 3.1.3 (VMSA-2011-0009 / VMSA-2011-0011)NessusMacOS X Local Security Checks
high