CVEvulnerability
CVE-2011-3868
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2011-10-07
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Buffer overflow in VMware Workstation 7.x before 7.1.5, VMware Player 3.x before 3.1.5, VMware Fusion 3.1.x before 3.1.3, and VMware AMS allows remote attackers to execute arbitrary code via a crafted UDF filesystem in an ISO image.
Affected configurations
• vmware workstation 7.0
• vmware workstation 7.0.1
• vmware workstation 7.1
• vmware workstation 7.1.1
• vmware workstation 7.1.2
• vmware workstation 7.1.3
• vmware workstation 7.1.4
• vmware player 3.0
• vmware player 3.0.1
• vmware player 3.1
• vmware player 3.1.1
• vmware player 3.1.2
• vmware player 3.1.3
• vmware player 3.1.4
• vmware fusion 3.1
• vmware fusion 3.1.1
• vmware fusion 3.1.2
• vmware ams
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://osvdb.org/76060 osvdb.org
- http://secunia.com/advisories/46241 secunia.com
- http://security.gentoo.org/glsa/glsa-201209-25.xml security.gentoo.org
- http://www.securityfocus.com/archive/1/520005/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/49942 www.securityfocus.com
- http://www.securitytracker.com/id?1026139 www.securitytracker.com
- http://www.vmware.com/security/advisories/VMSA-2011-0011.html Patch, Vendor Advisory
- http://osvdb.org/76060 osvdb.org
- http://secunia.com/advisories/46241 secunia.com
- http://security.gentoo.org/glsa/glsa-201209-25.xml security.gentoo.org
- http://www.securityfocus.com/archive/1/520005/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/49942 www.securityfocus.com
- http://www.securitytracker.com/id?1026139 www.securitytracker.com
- http://www.vmware.com/security/advisories/VMSA-2011-0011.html Patch, Vendor Advisory