{"api_version":"1","generated_at":"2026-07-23T08:32:02+00:00","cve":"CVE-2010-4295","urls":{"html":"https://cve.report/CVE-2010-4295","api":"https://cve.report/api/cve/CVE-2010-4295.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2010-4295","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2010-4295"},"summary":{"title":"CVE-2010-4295","description":"Race condition in the mounting process in vmware-mount in VMware Workstation 7.x before 7.1.2 build 301548 on Linux, VMware Player 3.1.x before 3.1.2 build 301548 on Linux, VMware Server 2.0.2 on Linux, and VMware Fusion 3.1.x before 3.1.2 build 332101 allows host OS users to gain privileges via vectors involving temporary files.","state":"PUBLISHED","assigner":"mitre","published_at":"2010-12-06 21:05:49","updated_at":"2026-04-29 01:13:23"},"problem_types":["CWE-362","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"6.9","severity":"","vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","data":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","baseScore":6.9,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"}}],"references":[{"url":"http://www.securityfocus.com/bid/45167","name":"http://www.securityfocus.com/bid/45167","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"],"title":"Multiple VMware products 'vmware-mount' Local Privilege Escalation Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://www.vupen.com/english/advisories/2010/3116","name":"http://www.vupen.com/english/advisories/2010/3116","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vmware.com/security/advisories/VMSA-2010-0018.html","name":"http://www.vmware.com/security/advisories/VMSA-2010-0018.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"VMSA-2010-0018","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/archive/1/514995/100/0/threaded","name":"http://www.securityfocus.com/archive/1/514995/100/0/threaded","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://lists.vmware.com/pipermail/security-announce/2010/000112.html","name":"http://lists.vmware.com/pipermail/security-announce/2010/000112.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"],"title":"[Security-announce] VMSA-2010-0018 VMware hosted products and ESX patches resolve multiple security issues","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://osvdb.org/69585","name":"http://osvdb.org/69585","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://secunia.com/advisories/42453","name":"http://secunia.com/advisories/42453","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"],"title":"VMware Products \"vmware-mount\" Privilege Escalation Security Issues - Advisories - Community","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securitytracker.com/id?1024819","name":"http://www.securitytracker.com/id?1024819","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"],"title":"SecurityTracker.com Archives - VMware Movie Decoder Heap Overflow in Decompression Routine Lets Remote Users Execute Arbitrary Code","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/42482","name":"http://secunia.com/advisories/42482","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"],"title":"VMware Server Multiple Vulnerabilities - Advisories - Community","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securitytracker.com/id?1024820","name":"http://www.securitytracker.com/id?1024820","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"],"title":"VMware Race Conditions and Input Validation Flaw Let Local Users on the Host Operating System Gain Elevated Privileges - SecurityTracker","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-4295","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-4295","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2010","cve_id":"4295","vulnerable":"0","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"linux","cpe5":"linux_kernel","cpe6":"-","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"4295","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"vmware","cpe5":"player","cpe6":"3.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"4295","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"vmware","cpe5":"player","cpe6":"3.1.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"4295","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"vmware","cpe5":"player","cpe6":"3.1.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"4295","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"vmware","cpe5":"workstation","cpe6":"7.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"4295","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"vmware","cpe5":"workstation","cpe6":"7.0.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"4295","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"vmware","cpe5":"workstation","cpe6":"7.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"4295","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"vmware","cpe5":"workstation","cpe6":"7.1.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"4295","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"vmware","cpe5":"workstation","cpe6":"7.1.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T03:43:13.972Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"[security-announce] 20101202 VMSA-2010-0018 VMware hosted products and ESX patches resolve multiple security issues","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://lists.vmware.com/pipermail/security-announce/2010/000112.html"},{"name":"69585","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://osvdb.org/69585"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.vmware.com/security/advisories/VMSA-2010-0018.html"},{"name":"45167","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/45167"},{"name":"20101203 VMSA-2010-0018 VMware hosted products and ESX patches resolve multiple security issues","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://www.securityfocus.com/archive/1/514995/100/0/threaded"},{"name":"42453","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/42453"},{"name":"1024819","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://www.securitytracker.com/id?1024819"},{"name":"42482","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/42482"},{"name":"ADV-2010-3116","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2010/3116"},{"name":"1024820","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://www.securitytracker.com/id?1024820"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2010-12-02T00:00:00.000Z","descriptions":[{"lang":"en","value":"Race condition in the mounting process in vmware-mount in VMware Workstation 7.x before 7.1.2 build 301548 on Linux, VMware Player 3.1.x before 3.1.2 build 301548 on Linux, VMware Server 2.0.2 on Linux, and VMware Fusion 3.1.x before 3.1.2 build 332101 allows host OS users to gain privileges via vectors involving temporary files."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2018-10-10T18:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"[security-announce] 20101202 VMSA-2010-0018 VMware hosted products and ESX patches resolve multiple security issues","tags":["mailing-list","x_refsource_MLIST"],"url":"http://lists.vmware.com/pipermail/security-announce/2010/000112.html"},{"name":"69585","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://osvdb.org/69585"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.vmware.com/security/advisories/VMSA-2010-0018.html"},{"name":"45167","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/45167"},{"name":"20101203 VMSA-2010-0018 VMware hosted products and ESX patches resolve multiple security issues","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://www.securityfocus.com/archive/1/514995/100/0/threaded"},{"name":"42453","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/42453"},{"name":"1024819","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://www.securitytracker.com/id?1024819"},{"name":"42482","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/42482"},{"name":"ADV-2010-3116","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2010/3116"},{"name":"1024820","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://www.securitytracker.com/id?1024820"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2010-4295","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Race condition in the mounting process in vmware-mount in VMware Workstation 7.x before 7.1.2 build 301548 on Linux, VMware Player 3.1.x before 3.1.2 build 301548 on Linux, VMware Server 2.0.2 on Linux, and VMware Fusion 3.1.x before 3.1.2 build 332101 allows host OS users to gain privileges via vectors involving temporary files."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"[security-announce] 20101202 VMSA-2010-0018 VMware hosted products and ESX patches resolve multiple security issues","refsource":"MLIST","url":"http://lists.vmware.com/pipermail/security-announce/2010/000112.html"},{"name":"69585","refsource":"OSVDB","url":"http://osvdb.org/69585"},{"name":"http://www.vmware.com/security/advisories/VMSA-2010-0018.html","refsource":"CONFIRM","url":"http://www.vmware.com/security/advisories/VMSA-2010-0018.html"},{"name":"45167","refsource":"BID","url":"http://www.securityfocus.com/bid/45167"},{"name":"20101203 VMSA-2010-0018 VMware hosted products and ESX patches resolve multiple security issues","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/514995/100/0/threaded"},{"name":"42453","refsource":"SECUNIA","url":"http://secunia.com/advisories/42453"},{"name":"1024819","refsource":"SECTRACK","url":"http://www.securitytracker.com/id?1024819"},{"name":"42482","refsource":"SECUNIA","url":"http://secunia.com/advisories/42482"},{"name":"ADV-2010-3116","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2010/3116"},{"name":"1024820","refsource":"SECTRACK","url":"http://www.securitytracker.com/id?1024820"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2010-4295","datePublished":"2010-12-06T21:00:00.000Z","dateReserved":"2010-11-18T00:00:00.000Z","dateUpdated":"2024-08-07T03:43:13.972Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2010-12-06 21:05:49","lastModifiedDate":"2026-04-29 01:13:23","problem_types":["CWE-362","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","baseScore":6.9,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:7.0:*:*:*:*:*:*:*","matchCriteriaId":"AB33DBC9-3B63-457E-A353-B9E7378211AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"34F436D4-B7B7-43CB-A2BD-C5E791F7E3C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:7.1:*:*:*:*:*:*:*","matchCriteriaId":"BF53DB66-4C79-47BB-AABD-6DCE2EF98E1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"13A31E93-7671-492E-A78F-89CF4703B04D"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:7.1.2:*:*:*:*:*:*:*","matchCriteriaId":"99ADA116-A571-4788-8DF2-09E8A2AF92F4"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*","matchCriteriaId":"703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:3.1:*:*:*:*:*:*:*","matchCriteriaId":"C158CD97-41BA-4422-9A55-B1A8650A0900"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"477D5F22-7DDD-461D-9CD1-2B2A968F6CB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"C174C452-7249-4B26-9F26-DFE9B3476874"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*","matchCriteriaId":"703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9E565F23-AEEE-41A4-80EC-01961AD5560E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*","matchCriteriaId":"703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:fusion:3.1:*:*:*:*:*:*:*","matchCriteriaId":"051D820C-E5F4-4DA2-8914-5A33FCFF2D1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:fusion:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"69FFA61C-2258-4006-AECA-D324F5700990"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:fusion:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"50D2840A-5AF2-4AC4-9243-07CE93E9E9B1"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*","matchCriteriaId":"4781BF1E-8A4E-4AFF-9540-23D523EE30DD"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2010","CveId":"4295","Ordinal":"1","Title":"CVE-2010-4295","CVE":"CVE-2010-4295","Year":"2010"},"notes":[{"CveYear":"2010","CveId":"4295","Ordinal":"1","NoteData":"Race condition in the mounting process in vmware-mount in VMware Workstation 7.x before 7.1.2 build 301548 on Linux, VMware Player 3.1.x before 3.1.2 build 301548 on Linux, VMware Server 2.0.2 on Linux, and VMware Fusion 3.1.x before 3.1.2 build 332101 allows host OS users to gain privileges via vectors involving temporary files.","Type":"Description","Title":"CVE-2010-4295"},{"CveYear":"2010","CveId":"4295","Ordinal":"2","NoteData":"2010-12-06","Type":"Other","Title":"Published"},{"CveYear":"2010","CveId":"4295","Ordinal":"3","NoteData":"2018-10-10","Type":"Other","Title":"Modified"}]}}}