Exploit for Immunity Canvas: CLOUDBURST

CVE-2009-1244

canvas · 2009-04-13

Description

CLOUDBURST VMware Workstation Guest Escape, supports Windows Guest in a Windows Host with "Accelerate 3D Graphics" enabled (default on new 6.5 VMs), requires latest DirectX redistributable, one shot repeatabilit

Affected software

Vmware Ace≤ 2.5.1, 1.0, 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.0.5, 1.0.6, 1.0.7, 2.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, 2.5.0

Vmware Esx= 3.0.2, 3.0.3, 3.5

Vmware Esxi= 3.5

Vmware Fusion≤ 2.0.3, 1.0, 1.1, 1.1.1, 1.1.2, 1.1.3, 2.0, 2.0.1, 2.0.2

All known vulnerabilities by product

Vmware Ace Vmware Esxi Vmware Fusion Vmware Player Vmware Server Vmware Workstation

CVSS 6.8 for CVE-2009-1244

6.8

MEDIUM SEVERITY

VectorAV:L/AC:L/Au:S/C:C/I:C/A:C

EPSS Score

2.0%higher than 78.1% of all CVEs

Updated 2026-06-16

Exploit Details

Modified:2009-04-13 16:30

Last Seen:2021-07-28 14:33

Reporter:Immunity Canvas

Exploit Code

MARKDOWN14 lines

## https://sploitus.com/exploit?id=CLOUDBURST
**Name**|  CLOUDBURST  
---|---  
**CVE**|  CVE-2009-1244  
**Exploit Pack**|  [CANVAS](<http://http://www.immunityinc.com/products-canvas.shtml>)  
**Description**| CLOUDBURST VMware Workstation Guest Escape  
**Notes**| CVE Name: CVE-2009-1244  
VENDOR: VMware  
Notes: The exploit currently only supports a Windows Guest in a Windows Host, with "Accelerate 3D Graphics" enabled (default on new 6.5 VMs). mosdefd3d.exe will remain on the Guest until removed. The MOSDEF Over Direct3D tunnel requires the latest DirectX redistributable (March 2009 or later) to be installed on the Guest (d3dx9_40.dll must be present). Linux connect back will freeze the VM for it is not threaded.  
Repeatability: One Shot  
CVS URL: https://vulners.com/cve/CVE-2009-1244  
CVE Url: https://vulners.com/cve/CVE-2009-1244  
Date public: 04/10/2009  
CVSS: 6.8

Exploit Code

Share

Share on social media: