NVD

Id
12676  
Name
CVE-2010-1142  
Description
VMware Tools in VMware Workstation 6.5.x before 6.5.4 build 246459; VMware Player 2.5.x before 2.5.4 build 246459; VMware ACE 2.5.x before 2.5.4 build 246459; VMware Server 2.x before 2.0.2 build 203138; VMware Fusion 2.x before 2.0.6 build 246742; VMware ESXi 3.5 and 4.0; and VMware ESX 2.5.5, 3.0.3, 3.5, and 4.0 does not properly load VMware programs, which might allow Windows guest OS users to gain privileges by placing a Trojan horse program at an unspecified location on the guest OS disk.  
Reject
 
CVSS Version
2  
CVSS Score
8.5  
Severity
High  
CVSS Base Score
8.5  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2010-04-12  
Modified Date
2013-05-14  
Seq
2010-1142  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
69581 12676 CVE-2010-1142 20100409 VMSA-2010-0007 VMware hosted products, vCenter Server and ESX patches resolve multiple security issues  View
69582 12676 CVE-2010-1142 20100409 VMSA-2010-0007 VMware hosted products, vCenter Server and ESX patches resolve multiple security issues  View
69583 12676 CVE-2010-1142 [security-announce] 20100409 VMSA-2010-0007 VMware hosted products, vCenter Server and ESX patches resolve multiple security issues  View
69584 12676 CVE-2010-1142 GLSA-201209-25  View
69585 12676 CVE-2010-1142 http://www.acrossecurity.com/aspr/ASPR-2010-04-12-2-PUB.txt  View
69586 12676 CVE-2010-1142 39394  View
69587 12676 CVE-2010-1142 1023832  View
69588 12676 CVE-2010-1142 1023833  View
69589 12676 CVE-2010-1142 http://www.vmware.com/security/advisories/VMSA-2010-0007.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
35585 JVNDB-2010-001365 複数の VMware 製品の VMware Tools における権限昇格の脆弱性 複数の VMware 製品の VMware Tools には、VMware プログラムのロードに関する処理に不備があるため、権限を取得される脆弱性が存在します。 CVE-2010-1142 43722 CVE-2010-1142 12676 8.5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001365.html 2010-04-09 2010-05-07 View