CVE-2009-2267 Privilege escalation in n/a
Guest OS users can gain privileges by exploiting improper exception handling in Virtual-8086 mode within VMware virtualization products.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2009-2267?
CVE-2009-2267 is a medium-severity vulnerability in Vmware Esx, published on 2 Nov 2009. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
VMware Workstation 6.5.x before 6.5.3 build 185404, VMware Player 2.5.x before 2.5.3 build 185404, VMware ACE 2.5.x before 2.5.3 build 185404, VMware Server 1.x before 1.0.10 build 203137 and 2.x before 2.0.2 build 203138, VMware Fusion 2.x before 2.0.6 build 196839, VMware ESXi 3.5 and 4.0, and VMware ESX 2.5.5, 3.0.3, 3.5, and 4.0, when Virtual-8086 mode is used, do not properly set the exception code upon a page fault (aka #PF) exception, which allows guest OS users to gain privileges on the guest OS by specifying a crafted value for the cs register.
Which versions are affected by CVE-2009-2267?
It affects 7 products.
Products include Vmware Ace, Vmware Esx, Vmware Esxi, Vmware Fusion, Vmware Player, Vmware Server and 1 more.
How do I fix CVE-2009-2267?
No fix has been published for CVE-2009-2267 yet. Limit exposure of the affected software until one is available.
Is CVE-2009-2267 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2009-2267 exists.
Public exploit code: 1 Exploit-DB entry.
Other vulnerabilities in Vmware Esx
Sources
Also known as GHSA-r3rg-38gc-7x9q.