nvd-json-data-feeds/CVE-2009/CVE-2009-26xx/CVE-2009-2628.json

{
  "id": "CVE-2009-2628",
  "sourceIdentifier": "cret@cert.org",
  "published": "2009-09-08T22:30:00.483",
  "lastModified": "2018-10-10T19:41:03.963",
  "vulnStatus": "Modified",
  "descriptions": [
    {
      "lang": "en",
      "value": "The VMnc media codec in vmnc.dll in VMware Movie Decoder before 6.5.3 build 185404, VMware Workstation 6.5.x before 6.5.3 build 185404, VMware Player 2.5.x before 2.5.3 build 185404, and VMware ACE 2.5.x before 2.5.3 build 185404 on Windows does not properly handle certain small heights in video content, which might allow remote attackers to execute arbitrary code via a crafted AVI file that triggers heap memory corruption."
    },
    {
      "lang": "es",
      "value": "El codec multimedia  VMnc en  vmnc.dll en VMware Movie Decoder anterior a v6.5.3 build 185404, VMware Workstation v6.5.x anterior a v6.5.3 build 185404, VMware Player v2.5.x anterior a v2.5.3 build 185404 y  VMware ACE v2.5.x anterior a v2.5.3 build 185404 sobre Windows, no maneja adecuadamente determinados tama\u00f1os de altura en el contenido de video, lo que podr\u00eda permitir a atacantes remotos ejecutar c\u00f3digo de su elecci\u00f3n  a trav\u00e9s de un archivo AVI manipulado que provocar\u00eda un corrupci\u00f3n de memoria."
    }
  ],
  "metrics": {
    "cvssMetricV2": [
      {
        "source": "nvd@nist.gov",
        "type": "Primary",
        "cvssData": {
          "version": "2.0",
          "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
          "accessVector": "NETWORK",
          "accessComplexity": "MEDIUM",
          "authentication": "NONE",
          "confidentialityImpact": "COMPLETE",
          "integrityImpact": "COMPLETE",
          "availabilityImpact": "COMPLETE",
          "baseScore": 9.3
        },
        "baseSeverity": "HIGH",
        "exploitabilityScore": 8.6,
        "impactScore": 10.0,
        "acInsufInfo": false,
        "obtainAllPrivilege": false,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ]
  },
  "weaknesses": [
    {
      "source": "nvd@nist.gov",
      "type": "Primary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-94"
        }
      ]
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:vmware:ace:2.5.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "B71537AE-346D-4BA9-90E7-EA0AB0CD0886"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:vmware:ace:2.5.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "5674C3DD-F510-4701-ACA8-437576307528"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:vmware:ace:2.5.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "E62960B2-91AE-4DD7-8085-9BA6BCB84473"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:vmware:movie_decoder:6.5.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "CE79F3F7-A21A-4CAA-BB0D-2955299EE8E0"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:vmware:player:2.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "FE944A70-CB9C-4712-9802-509531396A02"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:vmware:player:2.5.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "252D2C0B-B89A-4C89-8D6B-6A8E58FCD8DC"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:vmware:player:2.5.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "62DA49FA-6657-45B5-BF69-D3A03BA62A4D"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:vmware:workstation:6.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "AFC6B629-30B3-4C45-B5E9-1B4310F186FD"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:vmware:workstation:6.5.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "8E8F3BFF-676B-4E2C-98BA-DCA71E49060F"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:vmware:workstation:6.5.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "B3E658DA-56E8-49F0-B486-4EF622B63627"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:vmware:workstation:6.5.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "541D77A2-99C5-4CDB-877F-7E83E1E3369E"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "http://lists.vmware.com/pipermail/security-announce/2009/000065.html",
      "source": "cret@cert.org",
      "tags": [
        "Patch"
      ]
    },
    {
      "url": "http://www.kb.cert.org/vuls/id/444513",
      "source": "cret@cert.org",
      "tags": [
        "US Government Resource"
      ]
    },
    {
      "url": "http://www.securityfocus.com/archive/1/506286/100/0/threaded",
      "source": "cret@cert.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/36290",
      "source": "cret@cert.org",
      "tags": [
        "Patch"
      ]
    },
    {
      "url": "http://www.vmware.com/security/advisories/VMSA-2009-0012.html",
      "source": "cret@cert.org",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ]
    },
    {
      "url": "http://www.vupen.com/english/advisories/2009/2553",
      "source": "cret@cert.org",
      "tags": [
        "Vendor Advisory"
      ]
    }
  ]
}