high7.2Public exploit code
CVE-2009-3281
The vmx86 kernel extension in VMware Fusion before 2.0.6 build 196839 does not use correct file permissions, which allows host OS users to gain privileges on t…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- VMware Fusion 2.0.5 - vmx86 kext Kernel Privilege Escalation2009-10-02 · local · osx · Verified
Impact
The vmx86 kernel extension in VMware Fusion before 2.0.6 build 196839 does not use correct file permissions, which allows host OS users to gain privileges on the host OS via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vmware | Fusion | through 2.0.5 Versions 1.0, 1.1, 1.1.1, 1.1.2, 1.1.3 |
Weakness classification
References
- NVD record
- CVE.org record
- http://lists.vmware.com/pipermail/security-announce/2009/000066.html
- http://secunia.com/advisories/36928
- http://securitytracker.com/id?1022981
- http://www.vmware.com/security/advisories/VMSA-2009-0013.html
- http://www.vupen.com/english/advisories/2009/2811
- http://lists.vmware.com/pipermail/security-announce/2009/000066.html
- http://secunia.com/advisories/36928
- http://securitytracker.com/id?1022981
- http://www.vmware.com/security/advisories/VMSA-2009-0013.html
- http://www.vupen.com/english/advisories/2009/2811