CVE-2010-1139

Severity: high (CVSS 7.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2010-04-12 · updated 2026-06-16
Weakness: CWE-134

Description

Format string vulnerability in vmrun in VMware VIX API 1.6.x, VMware Workstation 6.5.x before 6.5.4 build 246459, VMware Player 2.5.x before 2.5.4 build 246459, and VMware Server 2.x on Linux, and VMware Fusion 2.x before 2.0.7 build 246742, allows local users to gain privileges via format string specifiers in process metadata.

Affected products

VMware Fusion: 2.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5 (+1)
VMware Player: 2.5, 2.5.1, 2.5.2, 2.5.3
VMware Server: 2.0.0, 2.0.1, 2.0.2
VMware Vix Api: 1.6.0, 1.6.1
VMware Workstation: 6.5.0, 6.5.1, 6.5.2, 6.5.3

References

http://archives.neohapsis.com/archives/bugtraq/2010-04/0077.html
http://archives.neohapsis.com/archives/fulldisclosure/2010-04/0121.html
http://lists.vmware.com/pipermail/security-announce/2010/000090.html
http://osvdb.org/63606
http://secunia.com/advisories/39201
http://secunia.com/advisories/39206
http://secunia.com/advisories/39215
http://security.gentoo.org/glsa/glsa-201209-25.xml
http://www.securityfocus.com/bid/39407
http://www.securitytracker.com/id?1023835
http://www.vmware.com/security/advisories/VMSA-2010-0007.html
http://archives.neohapsis.com/archives/bugtraq/2010-04/0077.html

Get alerted when CVE-2010-1139 or the next vulnerability affects your stack