VMware Workstation 5 VMnc Codec Multiple Vulnerabilities

Last Update Date: 28 Jan 2011 Release Date: 17 Sep 2009 4481 Views

RISK: Medium Risk

A vulnerabilities have been identified in VMware Workstation, which could be exploited by attackers to compromisean affected system.

The vulnerabilities are caused due to multiple errors in vmnc.dll when processing specially crafted AVI files and can be exploited to cause heap-based buffer overflows.

Impact

Remote Code Execution

System / Technologies affected

VMware Workstation 5.x

Solutions

Before installation of the software, please visit the software manufacturerweb-site for more details.

Upgrade to the latest 6.x version. or
Do not open untrusted AVI files.

Vulnerability Identifier

CVE-2009-0199
CVE-2009-0910
CVE-2009-2628

Source

Secunia