Lucene search

[email protected]NVD:CVE-2010-4294

HistoryDec 06, 2010 - 9:05 p.m.

CVE-2010-4294

2010-12-0621:05:49

CWE-94

[email protected]

web.nvd.nist.gov

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.6

Confidence

Low

EPSS

0.114

Percentile

95.2%

JSON

The frame decompression functionality in the VMnc media codec in VMware Movie Decoder before 6.5.5 build 328052 and 7.x before 7.1.2 build 301548, VMware Workstation 6.5.x before 6.5.5 build 328052 and 7.x before 7.1.2 build 301548 on Windows, VMware Player 2.5.x before 2.5.5 build 246459 and 3.x before 3.1.2 build 301548 on Windows, and VMware Server 2.x on Windows does not properly validate an unspecified size field, which allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted video file.

Affected configurations

Nvd

Node

vmwaremovie_decoderRange≤6.5.5

vmwaremovie_decoderMatch6.5.3

vmwaremovie_decoderMatch6.5.4

vmwaremovie_decoderMatch7.0

vmwaremovie_decoderMatch7.1.2

AND

microsoftwindows

Node

vmwareworkstationMatch6.5.0

vmwareworkstationMatch6.5.1

vmwareworkstationMatch6.5.2

vmwareworkstationMatch6.5.3

vmwareworkstationMatch6.5.4

vmwareworkstationMatch6.5.5

vmwareworkstationMatch7.0

vmwareworkstationMatch7.0.1

vmwareworkstationMatch7.1

vmwareworkstationMatch7.1.1

vmwareworkstationMatch7.1.2

AND

microsoftwindows

Node

vmwareplayerMatch2.5

vmwareplayerMatch2.5.1

vmwareplayerMatch2.5.2

vmwareplayerMatch2.5.3

vmwareplayerMatch2.5.4

vmwareplayerMatch2.5.5

vmwareplayerMatch3.0

vmwareplayerMatch3.0.1

vmwareplayerMatch3.1

vmwareplayerMatch3.1.1

vmwareplayerMatch3.1.2

AND

microsoftwindows

Node

vmwareserverMatch2.0.0

vmwareserverMatch2.0.1

vmwareserverMatch2.0.2

AND

microsoftwindows

VendorProductVersionCPE
vmwaremovie_decoder*cpe:2.3:a:vmware:movie_decoder:*:*:*:*:*:*:*:*
vmwaremovie_decoder6.5.3cpe:2.3:a:vmware:movie_decoder:6.5.3:*:*:*:*:*:*:*
vmwaremovie_decoder6.5.4cpe:2.3:a:vmware:movie_decoder:6.5.4:*:*:*:*:*:*:*
vmwaremovie_decoder7.0cpe:2.3:a:vmware:movie_decoder:7.0:*:*:*:*:*:*:*
vmwaremovie_decoder7.1.2cpe:2.3:a:vmware:movie_decoder:7.1.2:*:*:*:*:*:*:*
microsoftwindows*cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
vmwareworkstation6.5.0cpe:2.3:a:vmware:workstation:6.5.0:*:*:*:*:*:*:*
vmwareworkstation6.5.1cpe:2.3:a:vmware:workstation:6.5.1:*:*:*:*:*:*:*
vmwareworkstation6.5.2cpe:2.3:a:vmware:workstation:6.5.2:*:*:*:*:*:*:*
vmwareworkstation6.5.3cpe:2.3:a:vmware:workstation:6.5.3:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
vmware	movie_decoder	*	cpe:2.3:a:vmware:movie_decoder::::::::
vmware	movie_decoder	6.5.3	cpe:2.3:a:vmware:movie_decoder:6.5.3:::::::*
vmware	movie_decoder	6.5.4	cpe:2.3:a:vmware:movie_decoder:6.5.4:::::::*
vmware	movie_decoder	7.0	cpe:2.3:a:vmware:movie_decoder:7.0:::::::*
vmware	movie_decoder	7.1.2	cpe:2.3:a:vmware:movie_decoder:7.1.2:::::::*
microsoft	windows	*	cpe:2.3:o:microsoft:windows::::::::
vmware	workstation	6.5.0	cpe:2.3:a:vmware:workstation:6.5.0:::::::*
vmware	workstation	6.5.1	cpe:2.3:a:vmware:workstation:6.5.1:::::::*
vmware	workstation	6.5.2	cpe:2.3:a:vmware:workstation:6.5.2:::::::*
vmware	workstation	6.5.3	cpe:2.3:a:vmware:workstation:6.5.3:::::::*