CVE-2009-3732

VMware ACE 2.5.0-2.5.3 - Remote Code Execution via Format String Vulnerability

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2009-3732. PoCs published by Alexey Sintsov.

AI-analyzed exploit summary The advisory describes a format string vulnerability in VMware Remote Console Plug-in (CVE-2009-3732), which can be exploited via malformed shortcut parameters or a crafted HTML page using ActiveX. Exploitation may lead to arbitrary code execution on the system where VMrc is installed.

Description

Format string vulnerability in vmware-vmrc.exe build 158248 in VMware Remote Console (aka VMrc) allows remote attackers to execute arbitrary code via unspecified vectors.

Exploits (1)

exploitdb WRITEUP VERIFIED

by Alexey Sintsov · textdosmultiple

https://www.exploit-db.com/exploits/12188

View Code ZIP pw:eip

The advisory describes a format string vulnerability in VMware Remote Console Plug-in (CVE-2009-3732), which can be exploited via malformed shortcut parameters or a crafted HTML page using ActiveX. Exploitation may lead to arbitrary code execution on the system where VMrc is installed.

Classification

Writeup 90%

Attack Type

Rce

Complexity

Moderate

Reliability

Theoretical

Target: VMware Remote Console Plug-in (e.x.p build-158248)

No auth needed

Prerequisites: User interaction required (e.g., clicking a malicious shortcut or visiting a crafted HTML page) · VMware Remote Console Plug-in installed

MITRE ATT&CK

T1068 - Exploitation for Privilege Escalation T1189 - Drive-by Compromise

devstral-2 · analyzed Feb 16, 2026 Full analysis →