Lucene search
HistorySep 28, 2010 - 6:00 p.m.
CVE-2010-3277
vmware
workstation
player
installer
vulnerability
cve-2010-3277
nvd
web script
html
8.5 High
AI Score
Confidence
High
2.1 Low
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:L/Au:N/C:N/I:P/A:N
0.0004 Low
EPSS
Percentile
5.2%
The installer in VMware Workstation 7.x before 7.1.2 build 301548 and VMware Player 3.x before 3.1.2 build 301548 renders an index.htm file if present in the installation directory, which might allow local users to trigger unintended interpretation of web script or HTML by creating this file.
Related
openvas
openvas
VMware Products Security Bypass Vulnerability (Linux) -Sep10
2010-10-01 00:00:00
VMware Products Security Bypass Vulnerability (VMSA-2010-0014) - Windows
2010-10-01 00:00:00
VMware Products Security Bypass Vulnerability (VMSA-2010-0014) - Linux
2010-10-01 00:00:00
prion
prion
Design/Logic Flaw
2010-09-28 18:00:00
vmware
vmware
VMware Workstation, Player, and ACE address several security issues.
2010-09-23 00:00:00
VMware Workstation, Player, and ACE address several security issues.
2010-09-23 00:00:00
8.5 High
AI Score
Confidence
High
2.1 Low
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:L/Au:N/C:N/I:P/A:N
0.0004 Low
EPSS
Percentile
5.2%
Related for CVE-2010-3277