CVE-2009-3732

Format string vulnerability in vmware-vmrc.exe build 158248 in VMware Remote Console (aka VMrc) allows remote attackers to execute arbitrary code via unspecified vectors.

Score

CVSS 2.0 10.0 Critical

Status

Modified - cve@mitre.org

Published

2010-04-12

Last modified

2024-08-07

Weaknesses

CWE-134

Affected products

• Ace (Vmware)
• Player (Vmware)
• Server (Vmware)
• Workstation (Vmware)

References

• http://archives.neohapsis.com/archives/bugtraq/2010-04/0077.html
• http://archives.neohapsis.com/archives/fulldisclosure/2010-04/0121.html
• http://lists.vmware.com/pipermail/security-announce/2010/000090.html
• http://secunia.com/advisories/39110
• http://security.gentoo.org/glsa/glsa-201209-25.xml
• http://www.vmware.com/security/advisories/VMSA-2010-0007.html