vulnwire
9.3crit

CVE-2009-0199in critical feed

Heap-based buffer overflow in the VMnc media codec in vmnc.dll in VMware Movie Decoder before 6.5.3 build 185404, VMware Workstation 6.5.x…

Published 17 y ago · modified 4 mo ago · JSON

CVSS
9.3
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
5.0%
percentile 92%
Public exploits
0
none known

Heap-based buffer overflow in the VMnc media codec in vmnc.dll in VMware Movie Decoder before 6.5.3 build 185404, VMware Workstation 6.5.x before 6.5.3 build 185404, VMware Player 2.5.x before 2.5.3 build 185404, and VMware ACE 2.5.x before 2.5.3 build 185404 on Windows might allow remote attackers to execute arbitrary code via a video file with crafted dimensions (aka framebuffer parameters).

Exploit prediction (EPSS)

5.02% probability of exploitation in the next 30 days, higher than 92% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD2.09.3AV:N/AC:M/Au:N/C:C/I:C/A:C

Classification

Weakness
  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
Technology feeds
VMware (RSS, critical only)

References

  • lists.vmware.com /pipermail/security-announce/2009/000065.html · mailing-list, x_refsource_MLIST, x_transferred
  • securityfocus.com /bid/36290 · vdb-entry, x_refsource_BID, x_transferred
  • secunia.com /secunia_research/2009-25/ · x_refsource_MISC, x_transferred
  • securityfocus.com /archive/1/506286/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • vupen.com /english/advisories/2009/2553 · vdb-entry, x_refsource_VUPEN, x_transferred
  • secunia.com /advisories/34938 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • vmware.com /security/advisories/VMSA-2009-0012.html · x_refsource_CONFIRM, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.