CVE-2010-4295

Description

Race condition in the mounting process in vmware-mount in VMware Workstation 7.x before 7.1.2 build 301548 on Linux, VMware Player 3.1.x before 3.1.2 build 301548 on Linux, VMware Server 2.0.2 on Linux, and VMware Fusion 3.1.x before 3.1.2 build 332101 allows host OS users to gain privileges via vectors involving temporary files.

Weakness classification

• CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Primary references

• cve@mitre.org — Mailing List, Vendor Advisory
• cve@mitre.org — Broken Link
• cve@mitre.org — Broken Link, Vendor Advisory
• cve@mitre.org — Broken Link, Vendor Advisory
• cve@mitre.org — Broken Link, Third Party Advisory, VDB Entry
• cve@mitre.org — Broken Link, Third Party Advisory, VDB Entry
• cve@mitre.org — Broken Link, Third Party Advisory, VDB Entry
• cve@mitre.org — Broken Link, Third Party Advisory, VDB Entry
• cve@mitre.org — Vendor Advisory
• cve@mitre.org — Broken Link, Vendor Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Mailing List, Vendor Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Broken Link