Description
Format string vulnerability in vmrun in VMware VIX API 1.6.x, VMware Workstation 6.5.x before 6.5.4 build 246459, VMware Player 2.5.x before 2.5.4 build 246459, and VMware Server 2.x on Linux, and VMware Fusion 2.x before 2.0.7 build 246742, allows local users to gain privileges via format string specifiers in process metadata.
References
- GLSA-201209-25 vendor-advisory
- 39206 third-party-advisory
- [security-announce] 20100409 VMSA-2010-0007 VMware hosted products, vCenter Server and ESX patches resolve multiple security issues mailing-list
- 39407 vdb-entry
- 20100409 VMSA-2010-0007 VMware hosted products, vCenter Server and ESX patches resolve multiple security issues mailing-list
- http://www.vmware.com/security/advisories/VMSA-2010-0007.html
- 63606 vdb-entry
- 39201 third-party-advisory
- 39215 third-party-advisory
- 1023835 vdb-entry
- 20100409 VMSA-2010-0007 VMware hosted products, vCenter Server and ESX patches resolve multiple security issues mailing-list