CVE-2009-1564

Heap-based buffer overflow in vmnc.dll in the VMnc media codec in VMware Movie Decoder before 6.5.4 Build 246459 on Windows, and the movie decoder in VMware Workstation 6.5.x before 6.5.4 build 246459, VMware Player 2.5.x before 2.5.4 build 246459, and VMware Server 2.x on Windows, allows remote attackers to execute arbitrary code via an AVI file with crafted video chunks that use HexTile encoding.

• CWE-119

• http://archives.neohapsis.com/archives/bugtraq/2010-04/0077.html
• http://archives.neohapsis.com/archives/fulldisclosure/2010-04/0121.html
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=866
• http://lists.vmware.com/pipermail/security-announce/2010/000090.html
• http://osvdb.org/63614
• http://secunia.com/advisories/36712Vendor Advisory
• http://secunia.com/advisories/39206Vendor Advisory
• http://secunia.com/advisories/39215Vendor Advisory
• http://secunia.com/secunia_research/2009-36/Vendor Advisory
• http://www.securityfocus.com/bid/39363
• http://www.securitytracker.com/id?1023838
• http://www.vmware.com/security/advisories/VMSA-2010-0007.htmlVendor Advisory
• http://archives.neohapsis.com/archives/bugtraq/2010-04/0077.html
• http://archives.neohapsis.com/archives/fulldisclosure/2010-04/0121.html
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=866
• http://lists.vmware.com/pipermail/security-announce/2010/000090.html
• http://osvdb.org/63614
• http://secunia.com/advisories/36712Vendor Advisory
• http://secunia.com/advisories/39206Vendor Advisory
• http://secunia.com/advisories/39215Vendor Advisory
• http://secunia.com/secunia_research/2009-36/Vendor Advisory
• http://www.securityfocus.com/bid/39363
• http://www.securitytracker.com/id?1023838
• http://www.vmware.com/security/advisories/VMSA-2010-0007.htmlVendor Advisory

Published

Apr 12, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-1557Multiple cross-site scripting (XSS) vulnerabilities on the C…
• CVE-2009-1558Directory traversal vulnerability in adm/file.cgi on the Cis…
• CVE-2009-1559Absolute path traversal vulnerability in adm/file.cgi on the…
• CVE-2009-1560The Cisco Linksys WVC54GCA wireless video camera with firmwa…
• CVE-2009-1561Cross-site request forgery (CSRF) vulnerability in administr…
• CVE-2009-1563Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2009-1565vmnc.dll in the VMnc media codec in VMware Movie Decoder bef…
• CVE-2009-1566Integer overflow in Roxio Easy Media Creator 9.0.136, and Ro…
• CVE-2009-1567Multiple stack-based buffer overflows in the Lateral Arts Ph…
• CVE-2009-1568Stack-based buffer overflow in ienipp.ocx in Novell iPrint C…
• CVE-2009-1569Multiple stack-based buffer overflows in Novell iPrint Clien…
• CVE-2009-1570Integer overflow in the ReadImage function in plug-ins/file-…