CVE-2009-1805: VMware Ace

Medium severity, CVSS 4.0. EPSS: 0.3% chance of exploitation in the next 30 days.

Unspecified vulnerability in the VMware Descheduled Time Accounting driver in VMware Workstation 6.5.1 and earlier, VMware Player 2.5.1 and earlier, VMware ACE 2.5.1 and earlier, VMware Server 1.x before 1.0.9 build 156507 and 2.x before 2.0.1 build 156745, VMware Fusion 2.x before 2.0.2 build 147997, VMware ESXi 3.5, and VMware ESX 3.0.2, 3.0.3, and 3.5, when the Descheduled Time Accounting Service is not running, allows guest OS users on Windows to cause a denial of service via unknown vectors.

Affected products

• VMware Ace: up to and including 2.5.1; version 1.0 only; version 1.0.0 only; version 1.0.1 only; version 1.0.2 only; version 1.0.3 only; …
• VMware Esx: version 3.0.2 only; version 3.0.3 only; version 3.5 only
• VMware ESXi: version 3.5 only
• VMware Fusion: up to and including 2.0.1; version 2.0 only
• VMware Player: up to and including 2.5.1; version 1.0.0 only; version 1.0.1 only; version 1.0.2 only; version 1.0.3 only; version 1.0.4 only; …
• VMware Server: up to and including 1.0.8; version 1.0 only; version 1.0.1 only; version 1.0.1_build_29996 only; version 1.0.2 only; version 1.0.3 only; …
• VMware Workstation: up to and including 6.5.1; version 1.0.1 only; version 1.0.2 only; version 1.0.4 only; version 1.0.5 only; version 1.1 only; …

Published 2009-06-01. Last modified 2026-06-16.