CVE-2010-4296: vmware fusion Incorrect Authorization
Vulnerability summary
CVE-2010-4296 is a high (CVSS 7.2) Incorrect Authorization vulnerability in vmware fusion. EPSS estimates a 0.37% chance of exploitation in the next 30 days, higher than 29.2% of scored vulnerabilities.
Timeline
- 06-12-2010PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
vmware-mount in VMware Workstation 7.x before 7.1.2 build 301548 on Linux, VMware Player 3.1.x before 3.1.2 build 301548 on Linux, VMware Server 2.0.2 on Linux, and VMware Fusion 3.1.x before 3.1.2 build 332101 does not properly load libraries, which allows host OS users to gain privileges via vectors involving shared object files.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
0.37%
Chance of exploitation in the next 30 days
Percentile
29%
Versus all other CVEs
30-day change
0.00 pp
From 0.37% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Vmware4 products
- fusion3.1 | 3.1.1 | 3.1.2
- player3.1 | 3.1.1 | 3.1.2
- server2.0.2
- workstation7.0 | 7.0.1 | 7.1 | 7.1.1 | 7.1.2
1 vendor · 4 products
References
10 links- lists.vmware.com/pipermail/security-announce/2010/000112.htmlMailing ListX Refsource MLISTVendor Advisory
- www.securityfocus.com/archive/1/514995/100/0/threadedMailing ListX Refsource BUGTRAQBroken LinkThird Party AdvisoryVDB Entry