CVE-2009-0199 in the critical feed json
Heap-based buffer overflow in the VMnc media codec in vmnc.dll in VMware Movie Decoder before 6.5.3 build 185404, VMware Workstation 6.5.x…
published 2009-09-08 17 y ago modified 2026-06-16 4 mo ago also EUVD-2009-0208
- cvss
- 9.3
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 5.0%
- EPSS 5.0% chance of exploitation in 30 days, percentile 92%
- public exploits
- 0
- none known
Summary
Heap-based buffer overflow in the VMnc media codec in vmnc.dll in VMware Movie Decoder before 6.5.3 build 185404, VMware Workstation 6.5.x before 6.5.3 build 185404, VMware Player 2.5.x before 2.5.3 build 185404, and VMware ACE 2.5.x before 2.5.3 build 185404 on Windows might allow remote attackers to execute arbitrary code via a video file with crafted dimensions (aka framebuffer parameters).
Patch / fix
Exploit prediction
5.02% chance of exploitation in the next 30 days, higher than 92% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 9.3 | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Classification
- Weakness
-
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
- Technology feeds
References
-
lists.vmware.com
/pipermail/security-announce/2009/000065.html
mailing-list, patch
-
vupen.com
/english/advisories/2009/2553
vdb-entry, patch, vendor-advisory
-
vmware.com
/security/advisories/VMSA-2009-0012.html
patch, vendor-advisory
-
secunia.com
/secunia_research/2009-25/
vendor-advisory
-
secunia.com
/advisories/34938
third-party-advisory, vendor-advisory
-
securityfocus.com
/bid/36290
vdb-entry
-
securityfocus.com
/archive/1/506286/100/0/threaded
mailing-list
Sources
- CVE List CVE-2009-0199
- NVD CVE-2009-0199
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.