Strix
26.1K

CVE-2009-1244

UnknownEPSS 2.00%

Last modified

CVE-2009-1244 is a vulnerability of currently unknown severity. Unspecified vulnerability in the virtual machine display function in VMware Workstation 6.5.1 and earlier; VMware Player 2.5.1 and earlier; VMware ACE 2.5.1 and earlier; VMware Server 1.x before 1.0.9 build 156507 and 2.x before 2.0.1 build 156745; VMware Fusion before 2.0.4 build 159196; VMware ESXi 3.5; and VMware ESX 3.0.2, 3.0.3, and 3.5 allows guest OS users to execute arbitrary code on the host OS via unknown vectors, a different vulnerability than CVE-2008-4916.. EPSS estimates a 2.00% chance of exploitation in the next 30 days.

Description

Unspecified vulnerability in the virtual machine display function in VMware Workstation 6.5.1 and earlier; VMware Player 2.5.1 and earlier; VMware ACE 2.5.1 and earlier; VMware Server 1.x before 1.0.9 build 156507 and 2.x before 2.0.1 build 156745; VMware Fusion before 2.0.4 build 159196; VMware ESXi 3.5; and VMware ESX 3.0.2, 3.0.3, and 3.5 allows guest OS users to execute arbitrary code on the host OS via unknown vectors, a different vulnerability than CVE-2008-4916.

Metrics

EPSS Probability
2.00%

78.2th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

VendorProductVersionsUpdate
VmwareAce<= 2.5.1—
VmwareAce1.0—
VmwareAce1.0.0—
VmwareAce1.0.1—
VmwareAce1.0.2—
VmwareAce1.0.3—
VmwareAce1.0.4—
VmwareAce1.0.5—
VmwareAce1.0.6—
VmwareAce1.0.7—
VmwareAce2.0—
VmwareAce2.0.1—
VmwareAce2.0.2—
VmwareAce2.0.3—
VmwareAce2.0.4—
VmwareAce2.0.5—
VmwareAce2.5.0—
VmwareEsx3.0.2—
VmwareEsx3.0.3—
VmwareEsx3.5—
VmwareEsxi3.5—
VmwareFusion<= 2.0.3—
VmwareFusion1.0—
VmwareFusion1.1—
VmwareFusion1.1.1—
VmwareFusion1.1.2—
VmwareFusion1.1.3—
VmwareFusion2.0—
VmwareFusion2.0.1—
VmwareFusion2.0.2—
VmwarePlayer<= 2.5.1—
VmwarePlayer1.0.0—
VmwarePlayer1.0.1—
VmwarePlayer1.0.2—
VmwarePlayer1.0.3—
VmwarePlayer1.0.4—
VmwarePlayer1.0.5—
VmwarePlayer1.0.6—
VmwarePlayer1.0.7—
VmwarePlayer1.0.8—
VmwarePlayer2.0—
VmwarePlayer2.0.1—
VmwarePlayer2.0.2—
VmwarePlayer2.0.3—
VmwarePlayer2.0.4—
VmwarePlayer2.0.5—
VmwarePlayer2.5—
VmwareServer1.0—
VmwareServer1.0.1—
VmwareServer1.0.2—

Showing 50 of 93 affected configurations. See NVD for the full list.

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2009-1244?
Unspecified vulnerability in the virtual machine display function in VMware Workstation 6.5.1 and earlier; VMware Player 2.5.1 and earlier; VMware ACE 2.5.1 and earlier; VMware Server 1.x before 1.0.9 build 156507 and 2.x before 2.0.1 build 156745; VMware Fusion before 2.0.4 build 159196; VMware ESXi 3.5; and VMware ESX 3.0.2, 3.0.3, and 3.5 allows guest OS users to execute arbitrary code on the host OS via unknown vectors, a different vulnerability than CVE-2008-4916.
How severe is CVE-2009-1244?
Severity scoring for CVE-2009-1244 is pending analysis. The EPSS model estimates a 2.00% probability of exploitation in the next 30 days.
How do I fix CVE-2009-1244?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2009-1244?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST