CVE-2010-1141: VMware Ace

High severity, CVSS 8.5. EPSS: 3.8% chance of exploitation in the next 30 days.

VMware Tools in VMware Workstation 6.5.x before 6.5.4 build 246459; VMware Player 2.5.x before 2.5.4 build 246459; VMware ACE 2.5.x before 2.5.4 build 246459; VMware Server 2.x before 2.0.2 build 203138; VMware Fusion 2.x before 2.0.6 build 246742; VMware ESXi 3.5 and 4.0; and VMware ESX 2.5.5, 3.0.3, 3.5, and 4.0 does not properly access libraries, which allows user-assisted remote attackers to execute arbitrary code by tricking a Windows guest OS user into clicking on a file that is stored on a network share.

Affected products

• VMware Ace: version 2.5.0 only; version 2.5.1 only; version 2.5.2 only; version 2.5.3 only
• VMware Esx: version 2.5.5 only; version 3.0.3 only; version 3.5 only; version 4.0 only
• VMware ESXi: version 3.5 only; version 4.0 only
• VMware Fusion: version 2.0 only; version 2.0.1 only; version 2.0.2 only; version 2.0.3 only; version 2.0.4 only; version 2.0.5 only; …
• VMware Player: version 2.5 only; version 2.5.1 only; version 2.5.2 only; version 2.5.3 only
• VMware Server: version 2.0.0 only; version 2.0.1 only; version 2.0.2 only
• VMware Workstation: version 6.5.0 only; version 6.5.1 only; version 6.5.2 only; version 6.5.3 only

Published 2010-04-12. Last modified 2026-06-16.