CVEvulnerability
CVE-2010-3277
2.1 LOW
Official page ↗
- Status
- Modified
- Published
- 2010-09-28
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-264
Description
The installer in VMware Workstation 7.x before 7.1.2 build 301548 and VMware Player 3.x before 3.1.2 build 301548 renders an index.htm file if present in the installation directory, which might allow local users to trigger unintended interpretation of web script or HTML by creating this file.
Affected configurations
• vmware workstation 7.0
• vmware workstation 7.0.1
• vmware workstation 7.1
• vmware workstation 7.1.1
• vmware player 3.0
• vmware player 3.0.1
• vmware player 3.1
• vmware player 3.1.1
Related
Weakness · not in database (1)
References
- http://lists.vmware.com/pipermail/security-announce/2010/000105.html lists.vmware.com
- http://secunia.com/advisories/41574 Vendor Advisory
- http://securitytracker.com/id?1024481 securitytracker.com
- http://www.vmware.com/security/advisories/VMSA-2010-0014.html Vendor Advisory
- http://www.vupen.com/english/advisories/2010/2491 Vendor Advisory
- http://lists.vmware.com/pipermail/security-announce/2010/000105.html lists.vmware.com
- http://secunia.com/advisories/41574 Vendor Advisory
- http://securitytracker.com/id?1024481 securitytracker.com
- http://www.vmware.com/security/advisories/VMSA-2010-0014.html Vendor Advisory
- http://www.vupen.com/english/advisories/2010/2491 Vendor Advisory