CVE

Id
39702  
CVE No.
CVE-2009-2267  
Status
Candidate  
Description
VMware Workstation 6.5.x before 6.5.3 build 185404, VMware Player 2.5.x before 2.5.3 build 185404, VMware ACE 2.5.x before 2.5.3 build 185404, VMware Server 1.x before 1.0.10 build 203137 and 2.x before 2.0.2 build 203138, VMware Fusion 2.x before 2.0.6 build 196839, VMware ESXi 3.5 and 4.0, and VMware ESX 2.5.5, 3.0.3, 3.5, and 4.0, when Virtual-8086 mode is used, do not properly set the exception code upon a page fault (aka #PF) exception, which allows guest OS users to gain privileges on the guest OS by specifying a crafted value for the cs register.  
Phase
Assigned (20090701)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
436329 39702 CVE-2009-2267 BUGTRAQ:20091027 Invalid #PF Exception Code in VMware can result in Guest Privilege Escalation  View
436330 39702 CVE-2009-2267 URL:http://www.securityfocus.com/archive/1/archive/1/507539/100/0/threaded  View
436331 39702 CVE-2009-2267 BUGTRAQ:20091027 VMSA-2009-0015 VMware hosted products and ESX patches resolve two security issues  View
436332 39702 CVE-2009-2267 URL:http://www.securityfocus.com/archive/1/archive/1/507523/100/0/threaded  View
436333 39702 CVE-2009-2267 MLIST:[security-announce] 20091027 VMSA-2009-0015 VMware hosted products and ESX patches resolve two security issues  View
436334 39702 CVE-2009-2267 URL:http://lists.vmware.com/pipermail/security-announce/2009/000069.html  View
436335 39702 CVE-2009-2267 CONFIRM:http://www.vmware.com/security/advisories/VMSA-2009-0015.html  View
436336 39702 CVE-2009-2267 GENTOO:GLSA-201209-25  View
436337 39702 CVE-2009-2267 URL:http://security.gentoo.org/glsa/glsa-201209-25.xml  View
436338 39702 CVE-2009-2267 BID:36841  View
436339 39702 CVE-2009-2267 URL:http://www.securityfocus.com/bid/36841  View
436340 39702 CVE-2009-2267 OVAL:oval:org.mitre.oval:def:8473  View
436341 39702 CVE-2009-2267 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:8473  View
436342 39702 CVE-2009-2267 SECTRACK:1023082  View
436343 39702 CVE-2009-2267 URL:http://securitytracker.com/id?1023082  View
436344 39702 CVE-2009-2267 SECTRACK:1023083  View
436345 39702 CVE-2009-2267 URL:http://securitytracker.com/id?1023083  View
436346 39702 CVE-2009-2267 SECUNIA:37172  View
436347 39702 CVE-2009-2267 URL:http://secunia.com/advisories/37172  View
436348 39702 CVE-2009-2267 VUPEN:ADV-2009-3062  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
43771 JVNDB-2009-004778 Huawei D100 におけるアクセス権を取得される脆弱性 Huawei D100 は、以下の不備があるため、アクセス権を取得される脆弱性が存在します。 CVE-2009-2271 39702 10 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-004778.html  View