RCE in Vmware Ace
CVE-2009-2628
The VMnc media codec in vmnc.dll in VMware Movie Decoder before 6.5.3 build 185404, VMware Workstation 6.5.x before 6.5.3 build 185404, VMware Player 2.5.x before 2.5.3 build 185404, and VMware ACE 2.5.x before 2.5.3 build 185404 on Window…
Vulnerability class: RCE (Remote Code Execution)
EPSS: 0.056 (92.0th percentile) — read the EPSS interpretation.
Affected products
- Vmware Ace — versions 2.5.0, 2.5.1, 2.5.2
- Vmware Movie_decoder — versions 6.5.3
- Vmware Player — versions 2.5, 2.5.1, 2.5.2
- Vmware Workstation — versions 6.5, 6.5.0, 6.5.1
- N/a — versions n/a
Weakness classification (CWE)
References
- cret@cert.org (mailing-list, x_refsource_MLIST, Patch)
- cret@cert.org (Patch, vdb-entry, x_refsource_BID)
- cret@cert.org (mailing-list, x_refsource_BUGTRAQ)
- cret@cert.org (vdb-entry, x_refsource_VUPEN, Vendor Advisory)
- cret@cert.org (US Government Resource, x_refsource_CERT-VN, third-party-advisory)
- cret@cert.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cret@cert.org (x_refsource_CONFIRM, Patch, Vendor Advisory)