CVE-2010-4297

The VMware Tools update functionality in VMware Workstation 6.5.x before 6.5.5 build 328052 and 7.x before 7.1.2 build 301548; VMware Player 2.5.x before 2.5.5 build 328052 and 3.1.x before 3.1.2 build 301548; VMware Server 2.0.2; VMware Fusion 2.x before 2.0.8 build 328035 and 3.1.x before 3.1.2 build 332101; VMware ESXi 3.5, 4.0, and 4.1; and VMware ESX 3.0.3, 3.5, 4.0, and 4.1 allows host OS users to gain privileges on the guest OS via unspecified vectors, related to a "command injection" issue.

Affected products

Vmware Esxi, Vmware Fusion, Vmware Player, Vmware Server, Vmware Workstation

Vmware Workstation

= 6.5.0, 6.5.1, 6.5.2, 6.5.3, 6.5.5, 7.0, 7.0.1, 7.1, 7.1.1, 7.1.2

Fix

Available

CVSS 2.0

7.2 HIGH

EPSS

5.2% (92th percentile)

Weakness

CWE-20

NVD status

Modified

Published

2010-12-06