CVE-2010-1139

Format string vulnerability in vmrun in VMware VIX API 1.6.x, VMware Workstation 6.5.x before 6.5.4 build 246459, VMware Player 2.5.x before 2.5.4 build…

published April 12, 2010

CVSS
—
EPSS
0%
Percentile
25.3
In the wild
Unconfirmed
What it is

Format string vulnerability in vmrun in VMware VIX API 1.6.x, VMware Workstation 6.5.x before 6.5.4 build 246459, VMware Player 2.5.x before 2.5.4 build 246459, and VMware Server 2.x on Linux, and VMware Fusion 2.x before 2.0.7 build 246742, allows local users to gain privileges via format string specifiers in process metadata.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00333 · 25.3th percentile
Published
2010-04-12T18:00Z
EPSS history
Timeline
  • 12 APR 18:00Z
    Format string vulnerability in vmrun in VMware VIX API 1.6.x, VMware Workstation 6.5.x before 6.5.4 build 246459, VMware Player 2.5.x before 2.5.4 build…
    cvelistv5