Vulnerability Details CVE-2011-3868
Buffer overflow in VMware Workstation 7.x before 7.1.5, VMware Player 3.x before 3.1.5, VMware Fusion 3.1.x before 3.1.3, and VMware AMS allows remote attackers to execute arbitrary code via a crafted UDF filesystem in an ISO image.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.173
EPSS Ranking 94.8%
CVSS Severity
CVSS v2 Score 9.3
References
- http://osvdb.org/76060
- http://secunia.com/advisories/46241
- http://security.gentoo.org/glsa/glsa-201209-25.xml
- http://www.securityfocus.com/archive/1/520005/100/0/threaded
- http://www.securityfocus.com/bid/49942
- http://www.securitytracker.com/id?1026139
- http://www.vmware.com/security/advisories/VMSA-2011-0011.html
- http://osvdb.org/76060
- http://secunia.com/advisories/46241
- http://security.gentoo.org/glsa/glsa-201209-25.xml
- http://www.securityfocus.com/archive/1/520005/100/0/threaded
- http://www.securityfocus.com/bid/49942
- http://www.securitytracker.com/id?1026139
- http://www.vmware.com/security/advisories/VMSA-2011-0011.html
Products affected by CVE-2011-3868
-
cpe:2.3:a:vmware:ams:*
-
cpe:2.3:a:vmware:fusion:3.1
-
cpe:2.3:a:vmware:fusion:3.1.1
-
cpe:2.3:a:vmware:fusion:3.1.2
-
cpe:2.3:a:vmware:player:3.0
-
cpe:2.3:a:vmware:player:3.0.1
-
cpe:2.3:a:vmware:player:3.1
-
cpe:2.3:a:vmware:player:3.1.1
-
cpe:2.3:a:vmware:player:3.1.2
-
cpe:2.3:a:vmware:player:3.1.3
-
cpe:2.3:a:vmware:player:3.1.4
-
cpe:2.3:a:vmware:workstation:7.0
-
cpe:2.3:a:vmware:workstation:7.0.1
-
cpe:2.3:a:vmware:workstation:7.1
-
cpe:2.3:a:vmware:workstation:7.1.1
-
cpe:2.3:a:vmware:workstation:7.1.2
-
cpe:2.3:a:vmware:workstation:7.1.3
-
cpe:2.3:a:vmware:workstation:7.1.4