CVE-2009-3732

CRITICAL 10.0CVE-2009-3732 · Published 12/04/2010 · updated 16/06/2026

Package	Affected versions	Patched versions
ace vmware	`= 2.6≥ 2.5.0, < 2.5.4`	`2.5.4`
player vmware	`= 3.0≥ 2.5.0, < 2.5.4`	`2.5.4`
server vmware	`≥ 2.0.0, ≤ 2.0.2`	No fix yet
workstation vmware	`= 7.0≥ 6.5.0, < 6.5.4`	`6.5.4`

Description

Format string vulnerability in vmware-vmrc.exe build 158248 in VMware Remote Console (aka VMrc) allows remote attackers to execute arbitrary code via unspecified vectors.

References

archives.neohapsis.com/archives/bugtraq/2010-04/0077.html · Broken Link
archives.neohapsis.com/archives/fulldisclosure/2010-04/0121.html · Broken Link
lists.vmware.com/pipermail/security-announce/2010/000090.html · Mailing List
secunia.com/advisories/39110 · Not Applicable
security.gentoo.org/glsa/glsa-201209-25.xml · Third Party Advisory
vmware.com/security/advisories/VMSA-2010-0007.html · Patch

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free