CVE-2010-4296

vmware-mount in VMware Workstation 7.x before 7.1.2 build 301548 on Linux, VMware Player 3.1.x before 3.1.2 build 301548 on Linux, VMware Server 2.0.2 on Linux, and VMware Fusion 3.1.x before 3.1.2 build 332101 does not properly load libraries, which allows host OS users to gain privileges via vectors involving shared object files.

• CWE-863

• http://lists.vmware.com/pipermail/security-announce/2010/000112.htmlMailing List, Vendor Advisory
• http://osvdb.org/69584Broken Link
• http://secunia.com/advisories/42453Broken Link, Vendor Advisory
• http://secunia.com/advisories/42482Broken Link, Vendor Advisory
• http://www.securityfocus.com/archive/1/514995/100/0/threadedBroken Link, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/45168Broken Link, Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id?1024819Broken Link, Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id?1024820Broken Link, Third Party Advisory, VDB Entry
• http://www.vmware.com/security/advisories/VMSA-2010-0018.htmlVendor Advisory
• http://www.vupen.com/english/advisories/2010/3116Broken Link, Third Party Advisory
• http://lists.vmware.com/pipermail/security-announce/2010/000112.htmlMailing List, Vendor Advisory
• http://osvdb.org/69584Broken Link
• http://secunia.com/advisories/42453Broken Link, Vendor Advisory
• http://secunia.com/advisories/42482Broken Link, Vendor Advisory
• http://www.securityfocus.com/archive/1/514995/100/0/threadedBroken Link, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/45168Broken Link, Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id?1024819Broken Link, Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id?1024820Broken Link, Third Party Advisory, VDB Entry
• http://www.vmware.com/security/advisories/VMSA-2010-0018.htmlVendor Advisory
• http://www.vupen.com/english/advisories/2010/3116Broken Link, Third Party Advisory

Published

Dec 6, 2010

Last Modified

Jun 16, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-4290Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2010-4291Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2010-4292Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2010-4293Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2010-4294The frame decompression functionality in the VMnc media code…
• CVE-2010-4295Race condition in the mounting process in vmware-mount in VM…
• CVE-2010-4297The VMware Tools update functionality in VMware Workstation …
• CVE-2010-4298SQL injection vulnerability in the download module in Free S…
• CVE-2010-4299Heap-based buffer overflow in ZfHIPCND.exe in Novell Zenwork…
• CVE-2010-4300Heap-based buffer overflow in the dissect_ldss_transfer func…
• CVE-2010-4301epan/dissectors/packet-zbee-zcl.c in the ZigBee ZCL dissecto…
• CVE-2010-4302/opt/rv/Versions/CurrentVersion/Mcu/Config/Mcu.val in Cisco …