Vulnerability in Apple Mac_os_x

CVE-2010-4295

Race condition in the mounting process in vmware-mount in VMware Workstation 7.x before 7.1.2 build 301548 on Linux, VMware Player 3.1.x before 3.1.2 build 301548 on Linux, VMware Server 2.0.2 on Linux, and VMware Fusion 3.1.x before 3.1.2…

Vulnerability class: Race Condition

EPSS: 0.003 (20.6th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

Public proof-of-concept exploits

References

  • cve@mitre.org (Vendor Advisory, mailing-list, x_refsource_MLIST, Mailing List)
  • cve@mitre.org (x_refsource_OSVDB, vdb-entry, Broken Link)
  • cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
  • cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, Broken Link, x_refsource_BID)
  • cve@mitre.org (mailing-list, x_refsource_BUGTRAQ, VDB Entry, Third Party Advisory, Broken Link)
  • cve@mitre.org (x_refsource_SECUNIA, Broken Link, Vendor Advisory, third-party-advisory)
  • cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK, Broken Link)
  • cve@mitre.org (x_refsource_SECUNIA, Broken Link, Vendor Advisory, third-party-advisory)
  • cve@mitre.org (vdb-entry, Broken Link, x_refsource_VUPEN, Vendor Advisory)
  • cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK, Broken Link)

Frequently asked questions

What is CVE-2010-4295?
CVE-2010-4295 is a vulnerability in Apple Mac_os_x, classified under Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition). Published 2010-12-06.
Is CVE-2010-4295 known to be exploited?
1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.