CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 9.3. It affects Windows, VMware, VMWare. It may be remotely exploitable. It may lead to a denial-of-service condition.
CVE
CVE-2010-4294
Severity
HIGH
CVSS
9.3
EPSS
5.84%
Windows VMware VMWare
Original NVD Description
The frame decompression functionality in the VMnc media codec in VMware Movie Decoder before 6.5.5 build 328052 and 7.x before 7.1.2 build 301548, VMware Workstation 6.5.x before 6.5.5 build 328052 and 7.x before 7.1.2 build 301548 on Windows, VMware Player 2.5.x before 2.5.5 build 246459 and 3.x before 3.1.2 build 301548 on Windows, and VMware Server 2.x on Windows does not properly validate an unspecified size field, which allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted video file.