CVE-2009-1565

vmnc.dll in the VMnc media codec in VMware Movie Decoder before 6.5.4 Build 246459 on Windows, and the movie decoder in VMware Workstation 6.5.x before 6.5.4 build 246459, VMware Player 2.5.x before 2.5.4 build 246459, and VMware Server 2.x on Windows, allows remote attackers to execute arbitrary code via an AVI file with crafted HexTile-encoded video chunks that trigger heap-based buffer overflows, related to "integer truncation errors."

• CWE-119

• http://archives.neohapsis.com/archives/bugtraq/2010-04/0077.html
• http://archives.neohapsis.com/archives/fulldisclosure/2010-04/0121.html
• http://lists.vmware.com/pipermail/security-announce/2010/000090.htmlPatch
• http://secunia.com/advisories/36712Vendor Advisory
• http://secunia.com/advisories/39206Vendor Advisory
• http://secunia.com/advisories/39215Vendor Advisory
• http://secunia.com/secunia_research/2009-37/Vendor Advisory
• http://www.osvdb.org/63615
• http://www.securityfocus.com/bid/39364
• http://www.securitytracker.com/id?1023838
• http://www.vmware.com/security/advisories/VMSA-2010-0007.htmlPatch
• http://archives.neohapsis.com/archives/bugtraq/2010-04/0077.html
• http://archives.neohapsis.com/archives/fulldisclosure/2010-04/0121.html
• http://lists.vmware.com/pipermail/security-announce/2010/000090.htmlPatch
• http://secunia.com/advisories/36712Vendor Advisory
• http://secunia.com/advisories/39206Vendor Advisory
• http://secunia.com/advisories/39215Vendor Advisory
• http://secunia.com/secunia_research/2009-37/Vendor Advisory
• http://www.osvdb.org/63615
• http://www.securityfocus.com/bid/39364
• http://www.securitytracker.com/id?1023838
• http://www.vmware.com/security/advisories/VMSA-2010-0007.htmlPatch

Published

Apr 12, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-1558Directory traversal vulnerability in adm/file.cgi on the Cis…
• CVE-2009-1559Absolute path traversal vulnerability in adm/file.cgi on the…
• CVE-2009-1560The Cisco Linksys WVC54GCA wireless video camera with firmwa…
• CVE-2009-1561Cross-site request forgery (CSRF) vulnerability in administr…
• CVE-2009-1563Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2009-1564Heap-based buffer overflow in vmnc.dll in the VMnc media cod…
• CVE-2009-1566Integer overflow in Roxio Easy Media Creator 9.0.136, and Ro…
• CVE-2009-1567Multiple stack-based buffer overflows in the Lateral Arts Ph…
• CVE-2009-1568Stack-based buffer overflow in ienipp.ocx in Novell iPrint C…
• CVE-2009-1569Multiple stack-based buffer overflows in Novell iPrint Clien…
• CVE-2009-1570Integer overflow in the ReadImage function in plug-ins/file-…
• CVE-2009-1571Use-after-free vulnerability in the HTML parser in Mozilla F…