CVE-2010-4296

Severity: high (CVSS 7.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2010-12-06 · updated 2026-06-16
Weakness: CWE-863

Description

vmware-mount in VMware Workstation 7.x before 7.1.2 build 301548 on Linux, VMware Player 3.1.x before 3.1.2 build 301548 on Linux, VMware Server 2.0.2 on Linux, and VMware Fusion 3.1.x before 3.1.2 build 332101 does not properly load libraries, which allows host OS users to gain privileges via vectors involving shared object files.

Affected products

VMware Fusion: 3.1, 3.1.1, 3.1.2
VMware Player: 3.1, 3.1.1, 3.1.2
VMware Server: 2.0.2
VMware Workstation: 7.0, 7.0.1, 7.1, 7.1.1, 7.1.2

References

http://lists.vmware.com/pipermail/security-announce/2010/000112.html
http://osvdb.org/69584
http://secunia.com/advisories/42453
http://secunia.com/advisories/42482
http://www.securityfocus.com/archive/1/514995/100/0/threaded
http://www.securityfocus.com/bid/45168
http://www.securitytracker.com/id?1024819
http://www.securitytracker.com/id?1024820
http://www.vmware.com/security/advisories/VMSA-2010-0018.html
http://www.vupen.com/english/advisories/2010/3116
http://lists.vmware.com/pipermail/security-announce/2010/000112.html
http://osvdb.org/69584

Get alerted when CVE-2010-4296 or the next vulnerability affects your stack