CVE-2009-3732: vmware ace
CVSS: 10.0v2.0HighModified
Published 12-04-2010Last modified 07-08-2024
Vulnerability summary
CVE-2009-3732 is a high (CVSS 10.0) vulnerability in vmware ace. EPSS estimates a 16.20% chance of exploitation in the next 30 days, higher than 96.9% of scored vulnerabilities. 1 public exploit is recorded.
CVSS score
10.0/10
010
High · v2.0 (NVD)EPSS score
16.20%
0%100%
Medium · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits1exploit-database
Timeline
- 12-04-2010PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
Format string vulnerability in vmware-vmrc.exe build 158248 in VMware Remote Console (aka VMrc) allows remote attackers to execute arbitrary code via unspecified vectors.
CVSS metrics
1 score · 1 source · 1 versionHigh 10.0Preferred score · NVD (NIST)
AV:N/AC:L/Au:N/C:C/I:C/A:CSourcesSingle source
EPSS trend
Probability
16.20%
Chance of exploitation in the next 30 days
Percentile
97%
Versus all other CVEs
30-day change
0.00 pp
From 16.20% on 18-09-2026
18-09-202618-10-2026
EPSS score16.20%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundVMware Remote Console e.x.p build-158248 - Format String
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Vmware4 products
- ace≥ 2.5.0, < 2.5.4 | 2.6
- player≥ 2.5.0, < 2.5.4 | 3.0
- server≥ 2.0.0, ≤ 2.0.2
- workstation≥ 6.5.0, < 6.5.4 | 7.0
1 vendor · 4 products
References
6 links- lists.vmware.com/pipermail/security-announce/2010/000090.htmlMailing ListX Refsource MLISTPatchVendor Advisory
- archives.neohapsis.com/archives/fulldisclosure/2010-04/0121.htmlMailing ListX Refsource FULLDISCBroken Link