CVE-2010-2427

VMware Studio 2.0 does not properly write to temporary files, which allows local users to gain privileges via unspecified vectors.

• CWE-264

• http://lists.vmware.com/pipermail/security-announce/2010/000101.htmlPatch, Vendor Advisory
• http://secunia.com/advisories/40507Vendor Advisory
• http://securitytracker.com/id?1024187
• http://www.securityfocus.com/archive/1/512311/100/0/threaded
• http://www.securityfocus.com/bid/41568
• http://www.vupen.com/english/advisories/2010/1791Vendor Advisory
• http://www.wmware.com/security/advisories/VMSA-2010-0011.htmlPatch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/60351
• http://lists.vmware.com/pipermail/security-announce/2010/000101.htmlPatch, Vendor Advisory
• http://secunia.com/advisories/40507Vendor Advisory
• http://securitytracker.com/id?1024187
• http://www.securityfocus.com/archive/1/512311/100/0/threaded
• http://www.securityfocus.com/bid/41568
• http://www.vupen.com/english/advisories/2010/1791Vendor Advisory
• http://www.wmware.com/security/advisories/VMSA-2010-0011.htmlPatch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/60351

Published

Jul 22, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-2419Unspecified vulnerability in the Java Virtual Machine compon…
• CVE-2010-2420Multiple unspecified vulnerabilities in Fenrir Inc. ActiveGe…
• CVE-2010-2421Multiple unspecified vulnerabilities in Opera before 10.54 h…
• CVE-2010-2422Cross-site scripting (XSS) vulnerability in PortalTransforms…
• CVE-2010-2425Directory traversal vulnerability in TitanFTPd in South Rive…
• CVE-2010-2426Directory traversal vulnerability in TitanFTPd in South Rive…
• CVE-2010-2428Cross-site scripting (XSS) vulnerability in admin_loginok.ht…
• CVE-2010-2429Cross-site scripting (XSS) vulnerability in Splunk 4.0 throu…
• CVE-2010-2431The cupsFileOpen function in CUPS before 1.4.4 allows local …
• CVE-2010-2432The cupsDoAuthentication function in auth.c in the client in…
• CVE-2010-2433Multiple cross-site scripting (XSS) vulnerabilities in conte…
• CVE-2010-2434Buffer overflow in Arcext.dll 2.16.1 and earlier in pon soft…