{"api_version":"1","generated_at":"2026-07-23T07:17:09+00:00","cve":"CVE-2010-4296","urls":{"html":"https://cve.report/CVE-2010-4296","api":"https://cve.report/api/cve/CVE-2010-4296.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2010-4296","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2010-4296"},"summary":{"title":"CVE-2010-4296","description":"vmware-mount in VMware Workstation 7.x before 7.1.2 build 301548 on Linux, VMware Player 3.1.x before 3.1.2 build 301548 on Linux, VMware Server 2.0.2 on Linux, and VMware Fusion 3.1.x before 3.1.2 build 332101 does not properly load libraries, which allows host OS users to gain privileges via vectors involving shared object files.","state":"PUBLISHED","assigner":"mitre","published_at":"2010-12-06 21:05:49","updated_at":"2026-04-29 01:13:23"},"problem_types":["CWE-863","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"7.2","severity":"","vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","data":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","baseScore":7.2,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"}}],"references":[{"url":"http://www.securityfocus.com/bid/45168","name":"http://www.securityfocus.com/bid/45168","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"],"title":"Multiple VMware products 'vmware-mount' Local Privilege Escalation Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://www.vupen.com/english/advisories/2010/3116","name":"http://www.vupen.com/english/advisories/2010/3116","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vmware.com/security/advisories/VMSA-2010-0018.html","name":"http://www.vmware.com/security/advisories/VMSA-2010-0018.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"VMSA-2010-0018","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/archive/1/514995/100/0/threaded","name":"http://www.securityfocus.com/archive/1/514995/100/0/threaded","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://lists.vmware.com/pipermail/security-announce/2010/000112.html","name":"http://lists.vmware.com/pipermail/security-announce/2010/000112.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"],"title":"[Security-announce] VMSA-2010-0018 VMware hosted products and ESX patches resolve multiple security issues","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://osvdb.org/69584","name":"http://osvdb.org/69584","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://secunia.com/advisories/42453","name":"http://secunia.com/advisories/42453","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"],"title":"VMware Products \"vmware-mount\" Privilege Escalation Security Issues - Advisories - Community","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securitytracker.com/id?1024819","name":"http://www.securitytracker.com/id?1024819","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"],"title":"SecurityTracker.com Archives - VMware Movie Decoder Heap Overflow in Decompression Routine Lets Remote Users Execute Arbitrary Code","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/42482","name":"http://secunia.com/advisories/42482","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"],"title":"VMware Server Multiple Vulnerabilities - Advisories - Community","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securitytracker.com/id?1024820","name":"http://www.securitytracker.com/id?1024820","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"],"title":"VMware Race Conditions and Input Validation Flaw Let Local Users on the Host Operating System Gain Elevated Privileges - SecurityTracker","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-4296","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-4296","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2010","cve_id":"4296","vulnerable":"0","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"linux","cpe5":"linux_kernel","cpe6":"-","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"4296","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"vmware","cpe5":"player","cpe6":"3.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"4296","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"vmware","cpe5":"player","cpe6":"3.1.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"4296","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"vmware","cpe5":"player","cpe6":"3.1.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"4296","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"vmware","cpe5":"workstation","cpe6":"7.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"4296","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"vmware","cpe5":"workstation","cpe6":"7.0.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"4296","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"vmware","cpe5":"workstation","cpe6":"7.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"4296","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"vmware","cpe5":"workstation","cpe6":"7.1.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"4296","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"vmware","cpe5":"workstation","cpe6":"7.1.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T03:43:14.391Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"[security-announce] 20101202 VMSA-2010-0018 VMware hosted products and ESX patches resolve multiple security issues","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://lists.vmware.com/pipermail/security-announce/2010/000112.html"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.vmware.com/security/advisories/VMSA-2010-0018.html"},{"name":"45168","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/45168"},{"name":"20101203 VMSA-2010-0018 VMware hosted products and ESX patches resolve multiple security issues","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://www.securityfocus.com/archive/1/514995/100/0/threaded"},{"name":"42453","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/42453"},{"name":"1024819","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://www.securitytracker.com/id?1024819"},{"name":"42482","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/42482"},{"name":"ADV-2010-3116","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2010/3116"},{"name":"1024820","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://www.securitytracker.com/id?1024820"},{"name":"69584","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://osvdb.org/69584"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2010-12-02T00:00:00.000Z","descriptions":[{"lang":"en","value":"vmware-mount in VMware Workstation 7.x before 7.1.2 build 301548 on Linux, VMware Player 3.1.x before 3.1.2 build 301548 on Linux, VMware Server 2.0.2 on Linux, and VMware Fusion 3.1.x before 3.1.2 build 332101 does not properly load libraries, which allows host OS users to gain privileges via vectors involving shared object files."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2018-10-10T18:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"[security-announce] 20101202 VMSA-2010-0018 VMware hosted products and ESX patches resolve multiple security issues","tags":["mailing-list","x_refsource_MLIST"],"url":"http://lists.vmware.com/pipermail/security-announce/2010/000112.html"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.vmware.com/security/advisories/VMSA-2010-0018.html"},{"name":"45168","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/45168"},{"name":"20101203 VMSA-2010-0018 VMware hosted products and ESX patches resolve multiple security issues","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://www.securityfocus.com/archive/1/514995/100/0/threaded"},{"name":"42453","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/42453"},{"name":"1024819","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://www.securitytracker.com/id?1024819"},{"name":"42482","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/42482"},{"name":"ADV-2010-3116","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2010/3116"},{"name":"1024820","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://www.securitytracker.com/id?1024820"},{"name":"69584","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://osvdb.org/69584"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2010-4296","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"vmware-mount in VMware Workstation 7.x before 7.1.2 build 301548 on Linux, VMware Player 3.1.x before 3.1.2 build 301548 on Linux, VMware Server 2.0.2 on Linux, and VMware Fusion 3.1.x before 3.1.2 build 332101 does not properly load libraries, which allows host OS users to gain privileges via vectors involving shared object files."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"[security-announce] 20101202 VMSA-2010-0018 VMware hosted products and ESX patches resolve multiple security issues","refsource":"MLIST","url":"http://lists.vmware.com/pipermail/security-announce/2010/000112.html"},{"name":"http://www.vmware.com/security/advisories/VMSA-2010-0018.html","refsource":"CONFIRM","url":"http://www.vmware.com/security/advisories/VMSA-2010-0018.html"},{"name":"45168","refsource":"BID","url":"http://www.securityfocus.com/bid/45168"},{"name":"20101203 VMSA-2010-0018 VMware hosted products and ESX patches resolve multiple security issues","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/514995/100/0/threaded"},{"name":"42453","refsource":"SECUNIA","url":"http://secunia.com/advisories/42453"},{"name":"1024819","refsource":"SECTRACK","url":"http://www.securitytracker.com/id?1024819"},{"name":"42482","refsource":"SECUNIA","url":"http://secunia.com/advisories/42482"},{"name":"ADV-2010-3116","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2010/3116"},{"name":"1024820","refsource":"SECTRACK","url":"http://www.securitytracker.com/id?1024820"},{"name":"69584","refsource":"OSVDB","url":"http://osvdb.org/69584"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2010-4296","datePublished":"2010-12-06T21:00:00.000Z","dateReserved":"2010-11-18T00:00:00.000Z","dateUpdated":"2024-08-07T03:43:14.391Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2010-12-06 21:05:49","lastModifiedDate":"2026-04-29 01:13:23","problem_types":["CWE-863","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","baseScore":7.2,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:7.0:*:*:*:*:*:*:*","matchCriteriaId":"AB33DBC9-3B63-457E-A353-B9E7378211AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"34F436D4-B7B7-43CB-A2BD-C5E791F7E3C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:7.1:*:*:*:*:*:*:*","matchCriteriaId":"BF53DB66-4C79-47BB-AABD-6DCE2EF98E1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"13A31E93-7671-492E-A78F-89CF4703B04D"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:7.1.2:*:*:*:*:*:*:*","matchCriteriaId":"99ADA116-A571-4788-8DF2-09E8A2AF92F4"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*","matchCriteriaId":"703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:3.1:*:*:*:*:*:*:*","matchCriteriaId":"C158CD97-41BA-4422-9A55-B1A8650A0900"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"477D5F22-7DDD-461D-9CD1-2B2A968F6CB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"C174C452-7249-4B26-9F26-DFE9B3476874"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*","matchCriteriaId":"703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9E565F23-AEEE-41A4-80EC-01961AD5560E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*","matchCriteriaId":"703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:fusion:3.1:*:*:*:*:*:*:*","matchCriteriaId":"051D820C-E5F4-4DA2-8914-5A33FCFF2D1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:fusion:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"69FFA61C-2258-4006-AECA-D324F5700990"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:fusion:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"50D2840A-5AF2-4AC4-9243-07CE93E9E9B1"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*","matchCriteriaId":"4781BF1E-8A4E-4AFF-9540-23D523EE30DD"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2010","CveId":"4296","Ordinal":"1","Title":"CVE-2010-4296","CVE":"CVE-2010-4296","Year":"2010"},"notes":[{"CveYear":"2010","CveId":"4296","Ordinal":"1","NoteData":"vmware-mount in VMware Workstation 7.x before 7.1.2 build 301548 on Linux, VMware Player 3.1.x before 3.1.2 build 301548 on Linux, VMware Server 2.0.2 on Linux, and VMware Fusion 3.1.x before 3.1.2 build 332101 does not properly load libraries, which allows host OS users to gain privileges via vectors involving shared object files.","Type":"Description","Title":"CVE-2010-4296"},{"CveYear":"2010","CveId":"4296","Ordinal":"2","NoteData":"2010-12-06","Type":"Other","Title":"Published"},{"CveYear":"2010","CveId":"4296","Ordinal":"3","NoteData":"2018-10-10","Type":"Other","Title":"Modified"}]}}}