NVD

Id
49870  
Name
CVE-2009-2628  
Description
The VMnc media codec in vmnc.dll in VMware Movie Decoder before 6.5.3 build 185404, VMware Workstation 6.5.x before 6.5.3 build 185404, VMware Player 2.5.x before 2.5.3 build 185404, and VMware ACE 2.5.x before 2.5.3 build 185404 on Windows does not properly handle certain small heights in video content, which might allow remote attackers to execute arbitrary code via a crafted AVI file that triggers heap memory corruption.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-09-08  
Modified Date
2009-09-28  
Seq
2009-2628  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
252097 49870 CVE-2009-2628 [security-announce] 20090904 VMSA-2009-0012 VMware Movie Decoder, VMware Workstation, VMware Player, and VMware ACE resolve security issues.  View
252098 49870 CVE-2009-2628 VU#444513  View
252099 49870 CVE-2009-2628 20090905 VMSA-2009-0012 VMware Movie Decoder, VMware Workstation, VMware Player, and VMware ACE resolve security issues.  View
252100 49870 CVE-2009-2628 36290  View
252101 49870 CVE-2009-2628 http://www.vmware.com/security/advisories/VMSA-2009-0012.html  View
252102 49870 CVE-2009-2628 ADV-2009-2553  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
41514 JVNDB-2009-002521 複数の VMware 製品の VMnc media コーデックにおける任意のコードを実行される脆弱性 Windows 上で稼動する複数の VMware 製品の vmnc.dll の VMnc media コーデックには、ビデオコンテンツを適切に処理しないため、任意のコードを実行される脆弱性が存在します。 CVE-2009-2628 40059 CVE-2009-2628 49870 9.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002521.html 2009-09-04 2010-03-24 View