$ cve CVE-2009-2267 JSON

CVE-2009-2267 EXPLOIT

6.9

MEDIUM · CVSS 2.0 · EPSS 1.8% (pctl 77)

Patch early

A public exploit exists.

Description

VMware Workstation 6.5.x before 6.5.3 build 185404, VMware Player 2.5.x before 2.5.3 build 185404, VMware ACE 2.5.x before 2.5.3 build 185404, VMware Server 1.x before 1.0.10 build 203137 and 2.x before 2.0.2 build 203138, VMware Fusion 2.x before 2.0.6 build 196839, VMware ESXi 3.5 and 4.0, and VMware ESX 2.5.5, 3.0.3, 3.5, and 4.0, when Virtual-8086 mode is used, do not properly set the exception code upon a page fault (aka #PF) exception, which allows guest OS users to gain privileges on the guest OS by specifying a crafted value for the cs register.

Scoring

CVSS	6.9 (MEDIUM, v2.0)
Vector	AV:L/AC:M/Au:N/C:C/I:C/A:C
EPSS	1.76% — more likely to be exploited than 77% of all CVEs
On CISA KEV	no
Public exploit	yes
Published	2009-11-02
Last modified	2026-06-16

Affected (7)

Vendor	Product
vmware	ace
vmware	esx
vmware	esxi
vmware	fusion
vmware	player
vmware	server
vmware	workstation

Public exploits

Source	Title	Date
exploit-db	VMware Virtual 8086 - Linux Local Ring0	2009-10-27

References

→ the Explorer · watch your stack · NVD