CVE-2011-3868

VMware Workstation 7.x < 7.1.5 - Buffer Overflow via UDF Filesystem in ISO Image

Title source: llm
STIX 2.1

Description

Buffer overflow in VMware Workstation 7.x before 7.1.5, VMware Player 3.x before 3.1.5, VMware Fusion 3.1.x before 3.1.3, and VMware AMS allows remote attackers to execute arbitrary code via a crafted UDF filesystem in an ISO image.

References (7)

Core 7
Core References
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/46241
Third Party Advisory vendor-advisory x_refsource_gentoo
http://security.gentoo.org/glsa/glsa-201209-25.xml
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/49942
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1026139
Patch, Vendor Advisory x_refsource_confirm
http://www.vmware.com/security/advisories/VMSA-2011-0011.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/76060
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/520005/100/0/threaded

Scores

EPSS 0.2233
EPSS Percentile 95.9%

Details

CWE
CWE-119
Status published
Products (18)
vmware/ams
vmware/fusion 3.1
vmware/fusion 3.1.1
vmware/fusion 3.1.2
vmware/player 3.0
vmware/player 3.0.1
vmware/player 3.1
vmware/player 3.1.1
vmware/player 3.1.2
vmware/player 3.1.3
... and 8 more
Published Oct 07, 2011
Tracked Since Feb 18, 2026