CVE-2010-4294

The frame decompression functionality in the VMnc media codec in VMware Movie Decoder before 6.5.5 build 328052 and 7.x before 7.1.2 build 301548, VMware Workstation 6.5.x before 6.5.5 build 328052 and 7.x before 7.1.2 build 301548 on Windows, VMware Player 2.5.x before 2.5.5 build 246459 and 3.x before 3.1.2 build 301548 on Windows, and VMware Server 2.x on Windows does not properly validate an unspecified size field, which allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted video file.

• CWE-94

• http://lists.vmware.com/pipermail/security-announce/2010/000112.html
• http://osvdb.org/69596
• http://secunia.com/advisories/42482Vendor Advisory
• http://www.securityfocus.com/archive/1/514995/100/0/threaded
• http://www.securityfocus.com/bid/45169
• http://www.securitytracker.com/id?1024819
• http://www.vmware.com/security/advisories/VMSA-2010-0018.htmlVendor Advisory
• http://www.vupen.com/english/advisories/2010/3116Vendor Advisory
• http://lists.vmware.com/pipermail/security-announce/2010/000112.html
• http://osvdb.org/69596
• http://secunia.com/advisories/42482Vendor Advisory
• http://www.securityfocus.com/archive/1/514995/100/0/threaded
• http://www.securityfocus.com/bid/45169
• http://www.securitytracker.com/id?1024819
• http://www.vmware.com/security/advisories/VMSA-2010-0018.htmlVendor Advisory
• http://www.vupen.com/english/advisories/2010/3116Vendor Advisory

Published

Dec 6, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-4288Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2010-4289Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2010-4290Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2010-4291Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2010-4292Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2010-4293Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2010-4295Race condition in the mounting process in vmware-mount in VM…
• CVE-2010-4296vmware-mount in VMware Workstation 7.x before 7.1.2 build 30…
• CVE-2010-4297The VMware Tools update functionality in VMware Workstation …
• CVE-2010-4298SQL injection vulnerability in the download module in Free S…
• CVE-2010-4299Heap-based buffer overflow in ZfHIPCND.exe in Novell Zenwork…
• CVE-2010-4300Heap-based buffer overflow in the dissect_ldss_transfer func…