CVE-2009-3281

HighCVSS 7.2/10Last modified Jun 16, 2026

Description

The vmx86 kernel extension in VMware Fusion before 2.0.6 build 196839 does not use correct file permissions, which allows host OS users to gain privileges on the host OS via unspecified vectors.

Metrics

CVSS 2.0 7.2/10AV:L/AC:L/Au:N/C:C/I:C/A:C

Weakness enumeration

CWE-264

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://lists.vmware.com/pipermail/security-announce/2009/000066.htmlVendor Advisory
http://secunia.com/advisories/36928Vendor Advisory
http://securitytracker.com/id?1022981
http://www.vmware.com/security/advisories/VMSA-2009-0013.htmlVendor Advisory
http://www.vupen.com/english/advisories/2009/2811Vendor Advisory
http://lists.vmware.com/pipermail/security-announce/2009/000066.htmlVendor Advisory
http://secunia.com/advisories/36928Vendor Advisory
http://securitytracker.com/id?1022981
http://www.vmware.com/security/advisories/VMSA-2009-0013.htmlVendor Advisory
http://www.vupen.com/english/advisories/2009/2811Vendor Advisory

Timeline

Published: Oct 16, 2009
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2009

CVE-2009-32827.8Integer overflow in the vmx86 kernel extension in VMware Fusion before 2.0.6 build 196839 allows host OS users to cause a denial of service CVE-2009-32834.3Cross-site scripting (XSS) vulnerability in phpspot PHP BBS, PHP Image Capture BBS, PHP & CSS BBS, PHP BBS CE, PHP_RSS_Builder, and webshot,CVE-2009-32845.0Directory traversal vulnerability in phpspot PHP BBS, PHP Image Capture BBS, PHP & CSS BBS, PHP BBS CE, PHP_RSS_Builder, and webshot, dated CVE-2009-32864.6NFSv4 in the Linux kernel 2.6.18, and possibly other versions, does not properly clean up an inode when an O_EXCL create fails, which causes CVE-2009-32877.5lib/thin/connection.rb in Thin web server before 1.2.4 relies on the X-Forwarded-For header to determine the IP address of the client, which CVE-2009-32884.9The sg_build_indirect function in drivers/scsi/sg.c in Linux kernel 2.6.28-rc1 through 2.6.31-rc8 uses an incorrect variable when accessing CVE-2009-32897.8The g_file_copy function in glib 2.0 sets the permissions of a target file to the permissions of a symbolic link (777), which allows user-as CVE-2009-32907.2The kvm_emulate_hypercall function in arch/x86/kvm/x86.c in KVM in the Linux kernel 2.6.25-rc1, and other versions before 2.6.31, when runni CVE-2009-32917.5The php_openssl_apply_verification_policy function in PHP before 5.2.11 does not properly perform certificate validation, which has unknown CVE-2009-32927.5Unspecified vulnerability in PHP before 5.2.11, and 5.3.x before 5.3.1, has unknown impact and attack vectors related to "missing sanity che CVE-2009-32937.5Unspecified vulnerability in the imagecolortransparent function in PHP before 5.2.11 has unknown impact and attack vectors related to an inc CVE-2009-32945.0The popen API function in TSRM/tsrm_win32.c in PHP before 5.2.11 and 5.3.x before 5.3.1, when running on certain Windows operating systems,