CVE-2010-1140 - The USB service in VMware Workstation 7.0 before 7.0.1 build 227600 and VMware Player 3.0 before 3.0.1 build 227600 on Windows might allow host OS users to gain privileges by placing a Trojan horse program at an unspecified location on the host OS disk

Back Back to CVE browser

MEDIUM

The USB service in VMware Workstation 7.0 before 7.0.1 build 227600 and VMware Player 3.0 before 3.0.1 build 227600 on Windows might allow host OS users to gain privileges by placing a Trojan horse program at an unspecified location on the host OS disk

Published Apr 12, 2010

6.9

MEDIUM

CVSS 2.0

EPSS 0.32%

Description

The USB service in VMware Workstation 7.0 before 7.0.1 build 227600 and VMware Player 3.0 before 3.0.1 build 227600 on Windows might allow host OS users to gain privileges by placing a Trojan horse program at an unspecified location on the host OS disk.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-264

References (9)

http://archives.neohapsis.com/archives/bugtraq/2010-04/0077.html
mailing-listx_refsource_BUGTRAQ
http://archives.neohapsis.com/archives/fulldisclosure/2010-04/0121.html
mailing-listx_refsource_FULLDISC
http://lists.vmware.com/pipermail/security-announce/2010/000090.html
mailing-listx_refsource_MLISTPatchVendor Advisory
http://secunia.com/advisories/39206
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://security.gentoo.org/glsa/glsa-201209-25.xml
vendor-advisoryx_refsource_GENTOO
http://securitytracker.com/id?1023834
vdb-entryx_refsource_SECTRACK
http://www.securityfocus.com/bid/39397
vdb-entryx_refsource_BID
http://www.vmware.com/security/advisories/VMSA-2010-0007.html
x_refsource_CONFIRMPatchVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2010-1171
Advisory

Link	Providers	Tags
http://archives.neohapsis.com/archives/bugtraq/2010-04/0077.html		mailing-listx_refsource_BUGTRAQ
http://archives.neohapsis.com/archives/fulldisclosure/2010-04/0121.html		mailing-listx_refsource_FULLDISC
http://lists.vmware.com/pipermail/security-announce/2010/000090.html		mailing-listx_refsource_MLISTPatchVendor Advisory
http://secunia.com/advisories/39206		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://security.gentoo.org/glsa/glsa-201209-25.xml		vendor-advisoryx_refsource_GENTOO
http://securitytracker.com/id?1023834		vdb-entryx_refsource_SECTRACK
http://www.securityfocus.com/bid/39397		vdb-entryx_refsource_BID
http://www.vmware.com/security/advisories/VMSA-2010-0007.html		x_refsource_CONFIRMPatchVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2010-1171		Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Apr 12, 2010

Updated Aug 7, 2024

Reserved Mar 29, 2010

Link CVE-2010-1140

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2010-1140

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Apr 12, 2010

Updated Aug 7, 2024

Link EUVD-2010-1171

GitHub

No data