CVE-2010-4297
06.12.2010, 21:05
The VMware Tools update functionality in VMware Workstation 6.5.x before 6.5.5 build 328052 and 7.x before 7.1.2 build 301548; VMware Player 2.5.x before 2.5.5 build 328052 and 3.1.x before 3.1.2 build 301548; VMware Server 2.0.2; VMware Fusion 2.x before 2.0.8 build 328035 and 3.1.x before 3.1.2 build 332101; VMware ESXi 3.5, 4.0, and 4.1; and VMware ESX 3.0.3, 3.5, 4.0, and 4.1 allows host OS users to gain privileges on the guest OS via unspecified vectors, related to a "command injection" issue.Enginsight
| Vendor | Product | Version |
|---|---|---|
| vmware | workstation | 6.5.0 |
| vmware | workstation | 6.5.1 |
| vmware | workstation | 6.5.2 |
| vmware | workstation | 6.5.3 |
| vmware | workstation | 6.5.5 |
| vmware | workstation | 7.0 |
| vmware | workstation | 7.0.1 |
| vmware | workstation | 7.1 |
| vmware | workstation | 7.1.1 |
| vmware | workstation | 7.1.2 |
| vmware | player | 2.5 |
| vmware | player | 2.5.1 |
| vmware | player | 2.5.2 |
| vmware | player | 2.5.3 |
| vmware | player | 2.5.4 |
| vmware | player | 2.5.5 |
| vmware | player | 3.1 |
| vmware | player | 3.1.1 |
| vmware | player | 3.1.2 |
| vmware | fusion | 2.0 |
| vmware | fusion | 2.0.1 |
| vmware | fusion | 2.0.2 |
| vmware | fusion | 2.0.3 |
| vmware | fusion | 2.0.4 |
| vmware | fusion | 2.0.5 |
| vmware | fusion | 2.0.6 |
| vmware | fusion | 2.0.7 |
| vmware | fusion | 2.0.8 |
| vmware | fusion | 3.1 |
| vmware | fusion | 3.1.1 |
| vmware | fusion | 3.1.2 |
| vmware | esxi | 3.5 |
| vmware | esxi | 4.0 |
| vmware | esxi | 4.1 |
| vmware | esx | 3.5 |
| vmware | esx | 4.0 |
| vmware | esx | 4.1 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References