Vulnerability in Microsoft Windows
CVE-2009-3732
Format string vulnerability in vmware-vmrc.exe build 158248 in VMware Remote Console (aka VMrc) allows remote attackers to execute arbitrary code via unspecified vectors.
EPSS: 0.162 (96.6th percentile) — read the EPSS interpretation.
Affected products
- Microsoft Windows
- Vmware Ace — versions 2.6
- Vmware Player — versions 3.0
- Vmware Server
- Vmware Workstation — versions 7.0
- N/a — versions n/a
Weakness classification (CWE)
Public proof-of-concept exploits
References
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ, Broken Link)
- cve@mitre.org (mailing-list, x_refsource_FULLDISC, Broken Link)
- cve@mitre.org (Vendor Advisory, mailing-list, x_refsource_MLIST, Patch, Mailing List)
- cve@mitre.org (x_refsource_SECUNIA, Not Applicable, third-party-advisory)
- cve@mitre.org (vendor-advisory, Third Party Advisory, x_refsource_GENTOO)
- cve@mitre.org (x_refsource_CONFIRM, Patch, Vendor Advisory)
Frequently asked questions
- What is CVE-2009-3732?
- CVE-2009-3732 is a vulnerability in Microsoft Windows, classified under Use of Externally-Controlled Format String. Published 2010-04-12.
- Is CVE-2009-3732 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.