{"id":"CVE-2010-4295","url":"https://www.cyber-defence.io/tools/cve/CVE-2010-4295","generatedAt":"2026-10-27T19:53:21.315Z","title":"Race condition in the mounting process in vmware-mount in VMware Workstation 7.x before 7.1.2 build 301548 on Linux, VMware Player 3.1.x before 3.1.2 build 301548 on Linux, VMware Server 2.0.2 on Linux, and VMware Fusion 3.1.x before 3.1.2 build 332101…","description":"Race condition in the mounting process in vmware-mount in VMware Workstation 7.x before 7.1.2 build 301548 on Linux, VMware Player 3.1.x before 3.1.2 build 301548 on Linux, VMware Server 2.0.2 on Linux, and VMware Fusion 3.1.x before 3.1.2 build 332101 allows host OS users to gain privileges via vectors involving temporary files.","published":"2010-12-06T21:05:49.000Z","lastModified":"2026-06-16T23:24:31.000Z","status":"Modified","sourceIdentifier":"cve@mitre.org","cvss":{"version":"2.0","score":6.9,"severity":"MEDIUM","vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C"},"cwe":["CWE-362"],"affected":["vmware/workstation","vmware/player","vmware/server","vmware/fusion"],"epss":{"score":0.00285,"percentile":0.20884,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.29%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"http://lists.vmware.com/pipermail/security-announce/2010/000112.html","tags":["Mailing List","Vendor Advisory"],"source":"cve@mitre.org"},{"url":"http://osvdb.org/69585","tags":["Broken Link"],"source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/42453","tags":["Broken Link","Vendor Advisory"],"source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/42482","tags":["Broken Link","Vendor Advisory"],"source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/514995/100/0/threaded","tags":["Broken Link","Third Party Advisory","VDB Entry"],"source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/45167","tags":["Broken Link","Third Party Advisory","VDB Entry"],"source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1024819","tags":["Broken Link","Third Party Advisory","VDB Entry"],"source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1024820","tags":["Broken Link","Third Party Advisory","VDB Entry"],"source":"cve@mitre.org"},{"url":"http://www.vmware.com/security/advisories/VMSA-2010-0018.html","tags":["Vendor Advisory"],"source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2010/3116","tags":["Broken Link","Vendor Advisory"],"source":"cve@mitre.org"},{"url":"http://lists.vmware.com/pipermail/security-announce/2010/000112.html","tags":["Mailing List","Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/69585","tags":["Broken Link"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/42453","tags":["Broken Link","Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/42482","tags":["Broken Link","Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/514995/100/0/threaded","tags":["Broken Link","Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/45167","tags":["Broken Link","Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1024819","tags":["Broken Link","Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1024820","tags":["Broken Link","Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2010-0018.html","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/3116","tags":["Broken Link","Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2010-4295","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}