VMware Movie Decoder VMnc Codec Multiple Heap Overflow Vulnerabilities
BID:36290
Info
VMware Movie Decoder VMnc Codec Multiple Heap Overflow Vulnerabilities
| Bugtraq ID: | 36290 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2009-0199 CVE-2009-2628 |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 04 2009 12:00AM |
| Updated: | Sep 16 2009 07:21PM |
| Credit: | Alin Rad Pop and Will Dormann |
| Vulnerable: |
VMWare Workstation 6.5.3 VMWare Workstation 6.5.2 VMWare Workstation 6.5.1 VMWare Workstation 6.5 build 118166 VMWare Workstation 5.5.9 build 126128 VMWare Workstation 5.5.8 VMWare Workstation 5.5.7 VMWare Workstation 5.5.6 VMWare Workstation 5.5.5 VMWare Workstation 5.5.4 VMWare Workstation 5.5.3 build 34685 VMWare Workstation 5.5.1 VMWare Workstation 5.5 VMWare Workstation 6.5.2 build 156735 VMWare Player 2.5.3 VMWare Player 2.5.2 build 156735 VMWare Player 2.5.2 VMWare Player 2.5.1 VMWare Player 2.5 build 118166 VMWare Movie Decoder 6.5.3 |
| Not Vulnerable: |
VMWare Workstation 6.5.3 build 185404 VMWare Player 2.5.3 build 185404 VMWare Movie Decoder 6.5.3 build 185404 |
Discussion
VMware Movie Decoder VMnc Codec Multiple Heap Overflow Vulnerabilities
The VMnc codec shipped with VMware Movie Decoder is prone to multiple heap-overflow vulnerabilities because it fails to perform boundary checks before copying user-supplied data into process buffers.
Successful exploits may allow attackers to execute arbitrary code in the context of the application. Failed exploit attempts will likely result in denial-of-service conditions.
Versions prior to the following are affected (all are for Windows):
VMware Movie Decoder 6.5.3 build 185404
VMware Workstation 6.5.3 build 185404
VMware Player 2.5.3 build 185404
The VMnc codec shipped with VMware Movie Decoder is prone to multiple heap-overflow vulnerabilities because it fails to perform boundary checks before copying user-supplied data into process buffers.
Successful exploits may allow attackers to execute arbitrary code in the context of the application. Failed exploit attempts will likely result in denial-of-service conditions.
Versions prior to the following are affected (all are for Windows):
VMware Movie Decoder 6.5.3 build 185404
VMware Workstation 6.5.3 build 185404
VMware Player 2.5.3 build 185404
Exploit / POC
VMware Movie Decoder VMnc Codec Multiple Heap Overflow Vulnerabilities
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
A commercial proof of concept is available through VUPEN Security - Exploit and PoCs Service. This proof of concept is not otherwise publicly available or known to be circulating in the wild.
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
A commercial proof of concept is available through VUPEN Security - Exploit and PoCs Service. This proof of concept is not otherwise publicly available or known to be circulating in the wild.
Solution / Fix
VMware Movie Decoder VMnc Codec Multiple Heap Overflow Vulnerabilities
Solution:
Updates are available. Please see the references for details.
Solution:
Updates are available. Please see the references for details.
References
VMware Movie Decoder VMnc Codec Multiple Heap Overflow Vulnerabilities
References:
References:
- Movie Decoder Homepage (VMware)
- VMWare VMnc Codec Mismatched Dimensions Buffer Overflow (Secunia Research)
- Secunia Research: VMWare VMnc Codec Mismatched Dimensions Buffer Overflow (Secunia Research
- VMSA-2009-0012 VMware Movie Decoder, VMware Workstation, VMware Player, and VMwa (VMware Security team
- Vulnerability Note VU#444513 VMware VMnc AVI video codec image height heap overf (US-CERT)