VMware Ace vulnerabilities

44 CVEs affecting VMware Ace, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2009-4811, published 2010-04-27.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2008-3892, published 2008-09-03. High severity, CVSS 10.0. EPSS: 24.4% chance of exploitation in the next 30 days. Buffer overflow in a certain ActiveX control in the COM API in VMware Workstation 5.5.x before 5.5.8 build 108000, VMware Workstation 6.0.x before 6.0.5 build 109488, VMware Player 1.x before 1.0.8…
CVE-2007-0063, published 2007-09-21. High severity, CVSS 10.0. EPSS: 20.4% chance of exploitation in the next 30 days. Integer underflow in the DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Player 2 before 2.0.1 Build 55017, ACE…
CVE-2009-3732, published 2010-04-12. High severity, CVSS 10.0. EPSS: 16.2% chance of exploitation in the next 30 days. Format string vulnerability in vmware-vmrc.exe build 158248 in VMware Remote Console (aka VMrc) allows remote attackers to execute arbitrary code via unspecified vectors.
CVE-2005-4459, published 2005-12-21. High severity, CVSS 10.0. EPSS: 14.2% chance of exploitation in the next 30 days. Heap-based buffer overflow in the NAT networking components vmnat.exe and vmnet-natd in VMWare Workstation 5.5, GSX Server 3.2, ACE 1.0.1, and Player 1.0 allows remote authenticated attackers,…
CVE-2009-3707, published 2009-10-16. Medium severity, CVSS 5.0. EPSS: 11.1% chance of exploitation in the next 30 days. VMware Authentication Daemon 1.0 in vmware-authd.exe in the VMware Authorization Service in VMware Workstation 7.0 before 7.0.1 build 227600 and 6.5.x before 6.5.4 build 246459, VMware Player 3.0…
CVE-2009-0177, published 2009-01-20. Medium severity, CVSS 5.0. EPSS: 8.6% chance of exploitation in the next 30 days. vmwarebase.dll, as used in the vmware-authd service (aka vmware-authd.exe), in VMware Workstation 6.5.1 build 126130, 6.5.1 and earlier; VMware Player 2.5.1 build 126130, 2.5.1 and earlier; VMware…
CVE-2007-0062, published 2007-09-21. High severity, CVSS 10.0. EPSS: 7.6% chance of exploitation in the next 30 days. Integer overflow in the ISC dhcpd 3.0.x before 3.0.7 and 3.1.x before 3.1.1; and the DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before…
CVE-2007-0061, published 2007-09-21. High severity, CVSS 10.0. EPSS: 6.5% chance of exploitation in the next 30 days. The DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Player 2 before 2.0.1 Build 55017, ACE before 1.0.3 Build…
CVE-2009-2628, published 2009-09-08. High severity, CVSS 9.3. EPSS: 5.6% chance of exploitation in the next 30 days. The VMnc media codec in vmnc.dll in VMware Movie Decoder before 6.5.3 build 185404, VMware Workstation 6.5.x before 6.5.3 build 185404, VMware Player 2.5.x before 2.5.3 build 185404, and VMware ACE…
CVE-2009-0199, published 2009-09-08. High severity, CVSS 9.3. EPSS: 5% chance of exploitation in the next 30 days. Heap-based buffer overflow in the VMnc media codec in vmnc.dll in VMware Movie Decoder before 6.5.3 build 185404, VMware Workstation 6.5.x before 6.5.3 build 185404, VMware Player 2.5.x before 2.5.3…

Latest

CVE-2009-4811, published 2010-04-27. Medium severity, CVSS 5.0. EPSS: 2.8% chance of exploitation in the next 30 days. VMware Authentication Daemon 1.0 in vmware-authd.exe in the VMware Authorization Service in VMware Workstation 7.0 before 7.0.1 build 227600 and 6.5.x before 6.5.4 build 246459, VMware Player 3.0…
CVE-2010-1142, published 2010-04-12. High severity, CVSS 8.5. EPSS: 1.6% chance of exploitation in the next 30 days. VMware Tools in VMware Workstation 6.5.x before 6.5.4 build 246459; VMware Player 2.5.x before 2.5.4 build 246459; VMware ACE 2.5.x before 2.5.4 build 246459; VMware Server 2.x before 2.0.2 build…
CVE-2010-1141, published 2010-04-12. High severity, CVSS 8.5. EPSS: 3.8% chance of exploitation in the next 30 days. VMware Tools in VMware Workstation 6.5.x before 6.5.4 build 246459; VMware Player 2.5.x before 2.5.4 build 246459; VMware ACE 2.5.x before 2.5.4 build 246459; VMware Server 2.x before 2.0.2 build…
CVE-2010-1138, published 2010-04-12. Medium severity, CVSS 5.0. EPSS: 2.3% chance of exploitation in the next 30 days. The virtual networking stack in VMware Workstation 7.0 before 7.0.1 build 227600, VMware Workstation 6.5.x before 6.5.4 build 246459 on Windows, VMware Player 3.0 before 3.0.1 build 227600, VMware…
CVE-2009-2267, published 2009-11-02. Medium severity, CVSS 6.9. EPSS: 1.8% chance of exploitation in the next 30 days. VMware Workstation 6.5.x before 6.5.3 build 185404, VMware Player 2.5.x before 2.5.3 build 185404, VMware ACE 2.5.x before 2.5.3 build 185404, VMware Server 1.x before 1.0.10 build 203137 and 2.x…
CVE-2009-1805, published 2009-06-01. Medium severity, CVSS 4.0. EPSS: 0.3% chance of exploitation in the next 30 days. Unspecified vulnerability in the VMware Descheduled Time Accounting driver in VMware Workstation 6.5.1 and earlier, VMware Player 2.5.1 and earlier, VMware ACE 2.5.1 and earlier, VMware Server 1.x…