CVE-2010-1141 - CVE House

Back to Database

Status published High CVE-2010-1141

VMware Tools in VMware Workstation 6.5.x before 6.5.4 build 246459;...

8.5 CVSS

Vulnerability Description

VMware Tools in VMware Workstation 6.5.x before 6.5.4 build 246459; VMware Player 2.5.x before 2.5.4 build 246459; VMware ACE 2.5.x before 2.5.4 build 246459; VMware Server 2.x before 2.0.2 build 203138; VMware Fusion 2.x before 2.0.6 build 246742; VMware ESXi 3.5 and 4.0; and VMware ESX 2.5.5, 3.0.3, 3.5, and 4.0 does not properly access libraries, which allows user-assisted remote attackers to execute arbitrary code by tricking a Windows guest OS user into clicking on a file that is stored on a network share.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2010-1141

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from vmware

View All →

Weak password recovery vulnerability

A remote insecure deserialization vulnerability exixsts in VMWare Hyperic Agent...

A security filter misconfiguration exists in VMware Hyperic Server 5.8.6....

A remote unauthenticated insecure deserialization vulnerability exists in VMware Hyperic...

VMware Tools for Windows (12.x.y prior to 12.1.5, 11.x.y and...

Affected Vendor

vmware

View all reports →

Affected Software

workstation, player, ace, server, fusion, esxi, esx

Vulnerable Versions:

6.5.0, 6.5.1, 6.5.2, 6.5.3, 2.5, 2.5.1, 2.5.2, 2.5.3, 2.5.0, 2.0.0, 2.0.1, 2.0.2, 2.0, 2.0.3, 2.0.4, 2.0.5, 3.0, 3.5, 4.0, 2.5.5, 3.0.3

Timeline

Official Publish: April 12th, 2010

Last Modified: August 7th, 2024

Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.