CVE-2009-0910 - Heap-based buffer overflow in the VNnc Codec in VMware Workstation 6.5.x before 6.5.2 build 156735, VMware Player 2.5.x before 2.5.2 build 156735, VMware ACE 2.5.x before 2.5.2 build 156735, and VMware Server 2.0.x before 2.0.1 build 156745 allows remote attackers to execute arbitrary code via a crafted web page or video file, aka ZDI-CAN-436

Back Back to CVE browser

MEDIUM

Heap-based buffer overflow in the VNnc Codec in VMware Workstation 6.5.x before 6.5.2 build 156735, VMware Player 2.5.x before 2.5.2 build 156735, VMware ACE 2.5.x before 2.5.2 build 156735, and VMware Server 2.0.x before 2.0.1 build 156745 allows remote attackers to execute arbitrary code via a crafted web page or video file, aka ZDI-CAN-436

Published Apr 6, 2009

6.8

MEDIUM

CVSS 2.0

EPSS 2.81%

Description

Heap-based buffer overflow in the VNnc Codec in VMware Workstation 6.5.x before 6.5.2 build 156735, VMware Player 2.5.x before 2.5.2 build 156735, VMware ACE 2.5.x before 2.5.2 build 156735, and VMware Server 2.0.x before 2.0.1 build 156745 allows remote attackers to execute arbitrary code via a crafted web page or video file, aka ZDI-CAN-436.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-119

Buffer Overflow

References (9)

http://lists.vmware.com/pipermail/security-announce/2009/000054.html
mailing-listx_refsource_MLISTPatchVendor Advisory
http://seclists.org/fulldisclosure/2009/Apr/0036.html
mailing-listx_refsource_FULLDISCPatch
http://security.gentoo.org/glsa/glsa-201209-25.xml
vendor-advisoryx_refsource_GENTOO
http://www.securityfocus.com/bid/34373
vdb-entryx_refsource_BIDExploit
http://www.securitytracker.com/id?1021974
vdb-entryx_refsource_SECTRACK
http://www.vmware.com/security/advisories/VMSA-2009-0005.html
x_refsource_CONFIRM
http://www.vupen.com/english/advisories/2009/0944
vdb-entryx_refsource_VUPEN
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-0907
Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5786
vdb-entrysignaturex_refsource_OVAL

Link	Providers	Tags
http://lists.vmware.com/pipermail/security-announce/2009/000054.html		mailing-listx_refsource_MLISTPatchVendor Advisory
http://seclists.org/fulldisclosure/2009/Apr/0036.html		mailing-listx_refsource_FULLDISCPatch
http://security.gentoo.org/glsa/glsa-201209-25.xml		vendor-advisoryx_refsource_GENTOO
http://www.securityfocus.com/bid/34373		vdb-entryx_refsource_BIDExploit
http://www.securitytracker.com/id?1021974		vdb-entryx_refsource_SECTRACK
http://www.vmware.com/security/advisories/VMSA-2009-0005.html		x_refsource_CONFIRM
http://www.vupen.com/english/advisories/2009/0944		vdb-entryx_refsource_VUPEN
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-0907		Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5786		vdb-entrysignaturex_refsource_OVAL

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Apr 6, 2009

Updated Aug 7, 2024

Reserved Mar 14, 2009

Link CVE-2009-0910

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2009-0910

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Apr 6, 2009

Updated Aug 7, 2024

Link EUVD-2009-0907

GitHub

No data