NVD

Id
49518  
Name
CVE-2009-2267  
Description
VMware Workstation 6.5.x before 6.5.3 build 185404, VMware Player 2.5.x before 2.5.3 build 185404, VMware ACE 2.5.x before 2.5.3 build 185404, VMware Server 1.x before 1.0.10 build 203137 and 2.x before 2.0.2 build 203138, VMware Fusion 2.x before 2.0.6 build 196839, VMware ESXi 3.5 and 4.0, and VMware ESX 2.5.5, 3.0.3, 3.5, and 4.0, when Virtual-8086 mode is used, do not properly set the exception code upon a page fault (aka #PF) exception, which allows guest OS users to gain privileges on the guest OS by specifying a crafted value for the cs register.  
Reject
 
CVSS Version
2  
CVSS Score
6.9  
Severity
Medium  
CVSS Base Score
6.9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-11-02  
Modified Date
2013-05-14  
Seq
2009-2267  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
250390 49518 CVE-2009-2267 [security-announce] 20091027 VMSA-2009-0015 VMware hosted products and ESX patches resolve two security issues  View
250391 49518 CVE-2009-2267 oval:org.mitre.oval:def:8473  View
250392 49518 CVE-2009-2267 GLSA-201209-25  View
250393 49518 CVE-2009-2267 1023082  View
250394 49518 CVE-2009-2267 1023083  View
250395 49518 CVE-2009-2267 20091027 VMSA-2009-0015 VMware hosted products and ESX patches resolve two security issues  View
250396 49518 CVE-2009-2267 20091027 Invalid #PF Exception Code in VMware can result in Guest Privilege Escalation  View
250397 49518 CVE-2009-2267 36841  View
250398 49518 CVE-2009-2267 http://www.vmware.com/security/advisories/VMSA-2009-0015.html  View
250399 49518 CVE-2009-2267 ADV-2009-3062  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
41295 JVNDB-2009-002302 複数の VMware 製品におけるページフォールトの例外処理における権限昇格の脆弱性 複数の VMware 製品には、Virtual-8086 モードを使用している場合にページフォールトの例外を適切に処理しないため、権限昇格の脆弱性が存在します。 CVE-2009-2267 39698 CVE-2009-2267 49518 6.9 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002302.html 2009-10-27 2009-12-09 View