Approved changes feed: RSS · Atom

cpe:2.3:a:vmware:player:2.5.2:*:*:*:*:*:*:*

part: a version: 2.5.2 update: *

VendorVmware (7bb62c7c-2241-5a0b-8dbc-5f13251fb24e)
ProductPlayer (0a9bcc2e-9bda-5b64-9480-a3e4f68d8632)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2010-4297 vulnerable 2026-06-08 04:55:19.729631 Details available
The VMware Tools update functionality in VMware Workstation 6.5.x before 6.5.5 build 328052 and 7.x before 7.1.2 build 301548; VMware Player 2.5.x before 2.5.5 build 328052 and 3.1.x before 3.1.2 build 301548; VMware Server 2.0.2; VMware Fusion 2.x before 2.0.8 build 328035 and 3.1.x before 3.1.2 build 332101; VMware ESXi 3.5, 4.0, and 4.1; and VMware ESX 3.0.3, 3.5, 4.0, and 4.1 allows host OS users to gain privileges on the guest OS via unspecified vectors, related to a "command injection" issue.
Published: 2010-12-06T21:00:00.000Z
Updated: 2024-08-07T03:43:14.664Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4294 vulnerable 2026-06-08 04:55:19.720095 Details available
The frame decompression functionality in the VMnc media codec in VMware Movie Decoder before 6.5.5 build 328052 and 7.x before 7.1.2 build 301548, VMware Workstation 6.5.x before 6.5.5 build 328052 and 7.x before 7.1.2 build 301548 on Windows, VMware Player 2.5.x before 2.5.5 build 246459 and 3.x before 3.1.2 build 301548 on Windows, and VMware Server 2.x on Windows does not properly validate an unspecified size field, which allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted video file.
Published: 2010-12-06T21:00:00.000Z
Updated: 2024-08-07T03:43:14.430Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-1142 vulnerable 2026-06-08 04:54:05.437821 Details available
VMware Tools in VMware Workstation 6.5.x before 6.5.4 build 246459; VMware Player 2.5.x before 2.5.4 build 246459; VMware ACE 2.5.x before 2.5.4 build 246459; VMware Server 2.x before 2.0.2 build 203138; VMware Fusion 2.x before 2.0.6 build 246742; VMware ESXi 3.5 and 4.0; and VMware ESX 2.5.5, 3.0.3, 3.5, and 4.0 does not properly load VMware programs, which might allow Windows guest OS users to gain privileges by placing a Trojan horse program at an unspecified location on the guest OS disk.
Published: 2010-04-12T18:00:00.000Z
Updated: 2024-08-07T01:14:06.079Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-1141 vulnerable 2026-06-08 04:54:05.427998 Details available
VMware Tools in VMware Workstation 6.5.x before 6.5.4 build 246459; VMware Player 2.5.x before 2.5.4 build 246459; VMware ACE 2.5.x before 2.5.4 build 246459; VMware Server 2.x before 2.0.2 build 203138; VMware Fusion 2.x before 2.0.6 build 246742; VMware ESXi 3.5 and 4.0; and VMware ESX 2.5.5, 3.0.3, 3.5, and 4.0 does not properly access libraries, which allows user-assisted remote attackers to execute arbitrary code by tricking a Windows guest OS user into clicking on a file that is stored on a network share.
Published: 2010-04-12T18:00:00.000Z
Updated: 2024-08-07T01:14:06.463Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-1139 vulnerable 2026-06-08 04:54:05.415846 Details available
Format string vulnerability in vmrun in VMware VIX API 1.6.x, VMware Workstation 6.5.x before 6.5.4 build 246459, VMware Player 2.5.x before 2.5.4 build 246459, and VMware Server 2.x on Linux, and VMware Fusion 2.x before 2.0.7 build 246742, allows local users to gain privileges via format string specifiers in process metadata.
Published: 2010-04-12T18:00:00.000Z
Updated: 2024-08-07T01:14:06.432Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-1138 vulnerable 2026-06-08 04:54:05.402953 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-4811 vulnerable 2026-06-08 04:51:50.009988 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3707 vulnerable 2026-06-08 04:51:43.761340 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2628 vulnerable 2026-06-08 04:51:29.493182 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2267 vulnerable 2026-06-08 04:51:27.443922 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1565 vulnerable 2026-06-08 04:51:23.967580 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1564 vulnerable 2026-06-08 04:51:23.964522 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0199 vulnerable 2026-06-08 04:51:08.286860 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.