Vulnerability in Microsoft Windows
CVE-2009-3732
Format string vulnerability in vmware-vmrc.exe build 158248 in VMware Remote Console (aka VMrc) allows remote attackers to execute arbitrary code via unspecified vectors.
EPSS: 0.301 (96.8th percentile) — read the EPSS interpretation.
Affected products
- Microsoft Windows
- Vmware Ace — versions 2.6
- Vmware Player — versions 3.0
- Vmware Server
- Vmware Workstation — versions 7.0
- N/a — versions n/a
Weakness classification (CWE)
Public proof-of-concept exploits
References
- 20100409 VMSA-2010-0007 VMware hosted products, vCenter Server and ESX patches resolve multiple security issues (mailing-list, x_refsource_BUGTRAQ, Broken Link)
- 20100409 VMSA-2010-0007 VMware hosted products, vCenter Server and ESX patches resolve multiple security issues (mailing-list, x_refsource_FULLDISC, Broken Link)
- [security-announce] 20100409 VMSA-2010-0007 VMware hosted products, vCenter Server and ESX patches resolve multiple security issues (Vendor Advisory, mailing-list, x_refsource_MLIST, Patch, Mailing List)
- 39110 (x_refsource_SECUNIA, Not Applicable, third-party-advisory)
- GLSA-201209-25 (vendor-advisory, Third Party Advisory, x_refsource_GENTOO)
- cve@mitre.org (x_refsource_CONFIRM, Patch, Vendor Advisory)
Frequently asked questions
- What is CVE-2009-3732?
- CVE-2009-3732 is a vulnerability in Microsoft Windows, classified under Use of Externally-Controlled Format String. Published 2010-04-12.
- Is CVE-2009-3732 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.