Description
The virtual networking stack in VMware Workstation 7.0 before 7.0.1 build 227600, VMware Workstation 6.5.x before 6.5.4 build 246459 on Windows, VMware Player 3.0 before 3.0.1 build 227600, VMware Player 2.5.x before 2.5.4 build 246459 on Windows, VMware ACE 2.6 before 2.6.1 build 227600 and 2.5.x before 2.5.4 build 246459, VMware Server 2.x, and VMware Fusion 3.0 before 3.0.1 build 232708 and 2.x before 2.0.7 build 246742 allows remote attackers to obtain sensitive information from memory on the host OS by examining received network packets, related to interaction between the guest OS and the host vmware-vmx process.
References (11)
Core 11
Core References
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/39206
Patch, Vendor Advisory mailing-list
x_refsource_mlist
http://lists.vmware.com/pipermail/security-announce/2010/000090.html
Third Party Advisory vendor-advisory
x_refsource_gentoo
http://security.gentoo.org/glsa/glsa-201209-25.xml
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/39203
Third Party Advisory mailing-list
x_refsource_bugtraq
http://archives.neohapsis.com/archives/bugtraq/2010-04/0077.html
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id?1023836
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/39395
Patch, Vendor Advisory x_refsource_confirm
http://www.vmware.com/security/advisories/VMSA-2010-0007.html
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/39215
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://osvdb.org/63607
Third Party Advisory mailing-list
x_refsource_fulldisc
http://archives.neohapsis.com/archives/fulldisclosure/2010-04/0121.html
Scores
EPSS
0.0077
EPSS Percentile
73.7%
Details
CWE
CWE-200
Status
published
Products (26)
vmware/ace
2.5.0
vmware/ace
2.5.1
vmware/ace
2.5.2
vmware/ace
2.5.3
vmware/ace
2.6
vmware/fusion
2.0
vmware/fusion
2.0.1
vmware/fusion
2.0.2
vmware/fusion
2.0.3
vmware/fusion
2.0.4
... and 16 more
Published
Apr 12, 2010
Tracked Since
Feb 18, 2026