CVEvulnerability
CVE-2009-1146
4.9 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2009-04-06
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.9 MEDIUM — AV:L/AC:L/Au:N/C:N/I:N/A:C
Description
Unspecified vulnerability in an ioctl in hcmon.sys in VMware Workstation 6.5.1 and earlier, VMware Player 2.5.1 and earlier, VMware ACE 2.5.1 and earlier, and VMware Server 1.0.x before 1.0.9 build 156507 and 2.0.x before 2.0.1 build 156745 allows local users to cause a denial of service via unknown vectors, a different vulnerability than CVE-2008-3761.
Affected configurations
• vmware ace (<= 2.5.1)
• vmware ace 1.0
• vmware ace 1.0.0
• vmware ace 1.0.1
• vmware ace 1.0.2
• vmware ace 1.0.3
• vmware ace 1.0.4
• vmware ace 1.0.5
• vmware ace 1.0.6
• vmware ace 1.0.7
• vmware ace 2.0
• vmware ace 2.0.1
• vmware ace 2.0.2
• vmware ace 2.0.3
• vmware ace 2.0.4
• vmware ace 2.0.5
• vmware ace 2.5.0
• vmware player (<= 2.5.1)
• vmware player 1.0.0
• vmware player 1.0.1
• vmware player 1.0.2
• vmware player 1.0.3
• vmware player 1.0.4
• vmware player 1.0.5
• vmware player 1.0.6
• vmware player 1.0.7
• vmware player 1.0.8
• vmware player 2.0
• vmware player 2.0.1
• vmware player 2.0.2
• vmware player 2.0.3
• vmware player 2.0.4
• vmware player 2.0.5
• vmware player 2.5
• vmware server 1.0
• vmware server 1.0.1
• vmware server 1.0.2
• vmware server 1.0.3
• vmware server 1.0.4
• vmware server 1.0.5
• vmware server 1.0.6
• vmware server 1.0.7
• vmware server 1.0.8
• vmware server 2.0
• vmware workstation (<= 6.5.1)
• vmware workstation 1.0.1
• vmware workstation 1.0.2
• vmware workstation 1.0.4
• vmware workstation 1.0.5
• vmware workstation 1.1
• vmware workstation 1.1.1
• vmware workstation 1.1.2
• vmware workstation 2.0
• vmware workstation 2.0.1
• vmware workstation 3.2.1
• vmware workstation 3.4
• vmware workstation 4.0
• vmware workstation 4.0.1
• vmware workstation 4.0.2
• vmware workstation 4.5.2
… and 17 more
References
- http://lists.vmware.com/pipermail/security-announce/2009/000054.html Patch, Vendor Advisory
- http://seclists.org/fulldisclosure/2009/Apr/0036.html Patch
- http://www.securityfocus.com/bid/34373 www.securityfocus.com
- http://www.securitytracker.com/id?1021977 www.securitytracker.com
- http://www.vmware.com/security/advisories/VMSA-2009-0005.html www.vmware.com
- http://www.vupen.com/english/advisories/2009/0944 www.vupen.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6310 oval.cisecurity.org
- http://lists.vmware.com/pipermail/security-announce/2009/000054.html Patch, Vendor Advisory
- http://seclists.org/fulldisclosure/2009/Apr/0036.html Patch
- http://www.securityfocus.com/bid/34373 www.securityfocus.com
- http://www.securitytracker.com/id?1021977 www.securitytracker.com
- http://www.vmware.com/security/advisories/VMSA-2009-0005.html www.vmware.com
- http://www.vupen.com/english/advisories/2009/0944 www.vupen.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6310 oval.cisecurity.org