Lucene search
HistoryOct 16, 2009 - 4:30 p.m.
CVE-2009-3281
CVSS2
7.2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
AI Score
6.5
Confidence
Low
EPSS
0.001
Percentile
35.1%
The vmx86 kernel extension in VMware Fusion before 2.0.6 build 196839 does not use correct file permissions, which allows host OS users to gain privileges on the host OS via unspecified vectors.
Affected configurations
Node
vmwarefusionRangeβ€2.0.5
ORvmwarefusionMatch1.0
ORvmwarefusionMatch1.1
ORvmwarefusionMatch1.1.1
ORvmwarefusionMatch1.1.2
ORvmwarefusionMatch1.1.3
ORvmwarefusionMatch2.0
ORvmwarefusionMatch2.0.1
ORvmwarefusionMatch2.0.2
ORvmwarefusionMatch2.0.3
ORvmwarefusionMatch2.0.4
applemac_os_x
| Vendor | Product | Version | CPE |
|---|---|---|---|
| vmware | fusion | * | cpe:2.3:a:vmware:fusion:*:*:*:*:*:*:*:* |
| vmware | fusion | 1.0 | cpe:2.3:a:vmware:fusion:1.0:*:*:*:*:*:*:* |
| vmware | fusion | 1.1 | cpe:2.3:a:vmware:fusion:1.1:*:*:*:*:*:*:* |
| vmware | fusion | 1.1.1 | cpe:2.3:a:vmware:fusion:1.1.1:*:*:*:*:*:*:* |
| vmware | fusion | 1.1.2 | cpe:2.3:a:vmware:fusion:1.1.2:*:*:*:*:*:*:* |
| vmware | fusion | 1.1.3 | cpe:2.3:a:vmware:fusion:1.1.3:*:*:*:*:*:*:* |
| vmware | fusion | 2.0 | cpe:2.3:a:vmware:fusion:2.0:*:*:*:*:*:*:* |
| vmware | fusion | 2.0.1 | cpe:2.3:a:vmware:fusion:2.0.1:*:*:*:*:*:*:* |
| vmware | fusion | 2.0.2 | cpe:2.3:a:vmware:fusion:2.0.2:*:*:*:*:*:*:* |
| vmware | fusion | 2.0.3 | cpe:2.3:a:vmware:fusion:2.0.3:*:*:*:*:*:*:* |
Related
cve
cve
CVE-2009-3281
2009-10-16 16:30:00
exploitdb
exploitdb
VMware Fusion 2.0.5 - vmx86 kext Kernel Privilege Escalation
2009-10-02 00:00:00
cvelist
cvelist
CVE-2009-3281
2009-10-16 16:00:00
prion
prion
Code injection
2009-10-16 16:30:00
seebug
seebug
VMWare Fusionζ¬ε°ζη»ζε‘εζιζεζΌζ΄
2009-10-12 00:00:00
securityvulns
securityvulns
VMWare Fusion multiple security vulnerabilities
2009-10-03 00:00:00
VMSA-2009-0013 VMware Fusion resolves two security issues
2009-10-03 00:00:00
nessus
nessus
VMware Fusion < 2.0.6 (VMSA-2009-0013)
2009-10-02 00:00:00
vmware
vmware
VMware Fusion resolves two security issues
2009-10-01 00:00:00
CVSS2
7.2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
AI Score
6.5
Confidence
Low
EPSS
0.001
Percentile
35.1%
Related for NVD:CVE-2009-3281