CVE-2010-4295

Severity: medium (CVSS 6.9 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2010-12-06 · updated 2026-06-16
Weakness: CWE-362

Description

Race condition in the mounting process in vmware-mount in VMware Workstation 7.x before 7.1.2 build 301548 on Linux, VMware Player 3.1.x before 3.1.2 build 301548 on Linux, VMware Server 2.0.2 on Linux, and VMware Fusion 3.1.x before 3.1.2 build 332101 allows host OS users to gain privileges via vectors involving temporary files.

Affected products

VMware Fusion: 3.1, 3.1.1, 3.1.2
VMware Player: 3.1, 3.1.1, 3.1.2
VMware Server: 2.0.2
VMware Workstation: 7.0, 7.0.1, 7.1, 7.1.1, 7.1.2

References

http://lists.vmware.com/pipermail/security-announce/2010/000112.html
http://osvdb.org/69585
http://secunia.com/advisories/42453
http://secunia.com/advisories/42482
http://www.securityfocus.com/archive/1/514995/100/0/threaded
http://www.securityfocus.com/bid/45167
http://www.securitytracker.com/id?1024819
http://www.securitytracker.com/id?1024820
http://www.vmware.com/security/advisories/VMSA-2010-0018.html
http://www.vupen.com/english/advisories/2010/3116
http://lists.vmware.com/pipermail/security-announce/2010/000112.html
http://osvdb.org/69585

Get alerted when CVE-2010-4295 or the next vulnerability affects your stack