CVE-2010-4295: vmware fusion Race Condition

Vulnerability summary

CVE-2010-4295 is a medium (CVSS 6.9) Race Condition vulnerability in vmware fusion. EPSS estimates a 0.29% chance of exploitation in the next 30 days, higher than 19.6% of scored vulnerabilities.

Timeline

1. 06-12-2010
   PublishedVulnerability first disclosed.
2. 07-08-2024
   Last modifiedVulnerability information updated.

Description

Race condition in the mounting process in vmware-mount in VMware Workstation 7.x before 7.1.2 build 301548 on Linux, VMware Player 3.1.x before 3.1.2 build 301548 on Linux, VMware Server 2.0.2 on Linux, and VMware Fusion 3.1.x before 3.1.2 build 332101 allows host OS users to gain privileges via vectors involving temporary files.

• CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.