Vulnerability in VMware Ace
CVE-2009-1244
Unspecified vulnerability in the virtual machine display function in VMware Workstation 6.5.1 and earlier; VMware Player 2.5.1 and earlier; VMware ACE 2.5.1 and earlier; VMware Server 1.x before 1.0.9 build 156507 and 2.x before 2.0.1 build 156745; VMware Fusion before 2.0.4 build 159196; VMware ESXi 3.5; and VMware ESX 3.0.2, 3.0.3, and 3.5 allows guest OS users to execute arbitrary code on the host OS via unknown vectors, a different vulnerability than CVE-2008-4916.
EPSS: 0.020 (79.4th percentile) — read the EPSS interpretation.
Affected products
- Vmware Ace — versions 1.0, 1.0.0, 1.0.1
- Vmware Esx — versions 3.0.2, 3.0.3, 3.5
- Vmware Esxi — versions 3.5
- Vmware Fusion — versions 1.0, 1.1, 1.1.1
- Vmware Player — versions 1.0.0, 1.0.1, 1.0.2
- Vmware Server — versions 1.0, 1.0.1, 1.0.2
- Vmware Workstation — versions 1.0.1, 1.0.2, 1.0.4
- N/a — versions n/a
Public proof-of-concept exploits
References
- cve@mitre.org (vendor-advisory, x_refsource_GENTOO)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (Patch, vdb-entry, x_refsource_BID)
- cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
- cve@mitre.org (x_refsource_OSVDB, vdb-entry)
- cve@mitre.org (signature, x_refsource_OVAL, vdb-entry)
- cve@mitre.org (x_refsource_CONFIRM)
- cve@mitre.org (vdb-entry, x_refsource_VUPEN)
- cve@mitre.org (Vendor Advisory, mailing-list, x_refsource_MLIST, Patch)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
Frequently asked questions
- What is CVE-2009-1244?
- CVE-2009-1244 is a vulnerability in VMware Ace. Published 2009-04-13.
- Is CVE-2009-1244 known to be exploited?
- 5 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.