CVE-2009-2267

VMware Workstation 6.5.x before 6.5.3 build 185404, VMware Player 2.5.x before 2.5.3 build 185404, VMware ACE 2.5.x before 2.5.3 build 185404, VMware Server 1.x before 1.0.10 build 203137 and 2.x before 2.0.2 build 203138, VMware Fusion 2.x before 2.0.6 build 196839, VMware ESXi 3.5 and 4.0, and VMware ESX 2.5.5, 3.0.3, 3.5, and 4.0, when Virtual-8086 mode is used, do not properly set the exception code upon a page fault (aka #PF) exception, which allows guest OS users to gain privileges on the guest OS by specifying a crafted value for the cs register.

• http://lists.vmware.com/pipermail/security-announce/2009/000069.htmlVendor Advisory
• http://secunia.com/advisories/37172Vendor Advisory
• http://security.gentoo.org/glsa/glsa-201209-25.xml
• http://securitytracker.com/id?1023082
• http://securitytracker.com/id?1023083
• http://www.securityfocus.com/archive/1/507523/100/0/threaded
• http://www.securityfocus.com/archive/1/507539/100/0/threaded
• http://www.securityfocus.com/bid/36841Exploit
• http://www.vmware.com/security/advisories/VMSA-2009-0015.htmlPatch, Vendor Advisory
• http://www.vupen.com/english/advisories/2009/3062Vendor Advisory
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8473
• http://lists.vmware.com/pipermail/security-announce/2009/000069.htmlVendor Advisory
• http://secunia.com/advisories/37172Vendor Advisory
• http://security.gentoo.org/glsa/glsa-201209-25.xml
• http://securitytracker.com/id?1023082
• http://securitytracker.com/id?1023083
• http://www.securityfocus.com/archive/1/507523/100/0/threaded
• http://www.securityfocus.com/archive/1/507539/100/0/threaded
• http://www.securityfocus.com/bid/36841Exploit
• http://www.vmware.com/security/advisories/VMSA-2009-0015.htmlPatch, Vendor Advisory
• http://www.vupen.com/english/advisories/2009/3062Vendor Advisory
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8473

Published

Nov 2, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-2260stardict 3.0.1, when Enable Net Dict is configured, sends th…
• CVE-2009-2261PeaZIP 2.6.1, 2.5.1, and earlier on Windows allows user-assi…
• CVE-2009-2262PHP remote file inclusion vulnerability in install/di.php in…
• CVE-2009-2263Directory traversal vulnerability in index.php in Awesome PH…
• CVE-2009-2265Multiple directory traversal vulnerabilities in FCKeditor be…
• CVE-2009-2266OXID eShop 4.x before 4.1.4-21266, 3.x, and 2.x allows remot…
• CVE-2009-2268Cross-site scripting (XSS) vulnerability in the Cross-Domain…
• CVE-2009-2269SQL injection vulnerability in Empire CMS 5.1 allows remote …
• CVE-2009-2270Unrestricted file upload vulnerability in member/uploads_edi…
• CVE-2009-2271The Huawei D100 has (1) a certain default administrator pass…
• CVE-2009-2272The Huawei D100 stores the administrator's account name and …7.5
• CVE-2009-2273The default configuration of the Wi-Fi component on the Huaw…