CVEvulnerability
CVE-2009-3281
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2009-10-16
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
The vmx86 kernel extension in VMware Fusion before 2.0.6 build 196839 does not use correct file permissions, which allows host OS users to gain privileges on the host OS via unspecified vectors.
Affected configurations
• vmware fusion (<= 2.0.5)
• vmware fusion 1.0
• vmware fusion 1.1
• vmware fusion 1.1.1
• vmware fusion 1.1.2
• vmware fusion 1.1.3
• vmware fusion 2.0
• vmware fusion 2.0.1
• vmware fusion 2.0.2
• vmware fusion 2.0.3
• vmware fusion 2.0.4
Related
Weakness · not in database (1)
References
- http://lists.vmware.com/pipermail/security-announce/2009/000066.html Vendor Advisory
- http://secunia.com/advisories/36928 Vendor Advisory
- http://securitytracker.com/id?1022981 securitytracker.com
- http://www.vmware.com/security/advisories/VMSA-2009-0013.html Vendor Advisory
- http://www.vupen.com/english/advisories/2009/2811 Vendor Advisory
- http://lists.vmware.com/pipermail/security-announce/2009/000066.html Vendor Advisory
- http://secunia.com/advisories/36928 Vendor Advisory
- http://securitytracker.com/id?1022981 securitytracker.com
- http://www.vmware.com/security/advisories/VMSA-2009-0013.html Vendor Advisory
- http://www.vupen.com/english/advisories/2009/2811 Vendor Advisory