CVE-2009-1564 in the critical feed json
Heap-based buffer overflow in vmnc.dll in the VMnc media codec in VMware Movie Decoder before 6.5.4 Build 246459 on Windows, and the movie…
published 2010-04-12 16 y ago modified 2026-06-16 4 mo ago also EUVD-2009-1560
- cvss
- 9.3
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 6.2%
- EPSS 6.2% chance of exploitation in 30 days, percentile 93%
- public exploits
- 0
- none known
Summary
Heap-based buffer overflow in vmnc.dll in the VMnc media codec in VMware Movie Decoder before 6.5.4 Build 246459 on Windows, and the movie decoder in VMware Workstation 6.5.x before 6.5.4 build 246459, VMware Player 2.5.x before 2.5.4 build 246459, and VMware Server 2.x on Windows, allows remote attackers to execute arbitrary code via an AVI file with crafted video chunks that use HexTile encoding.
Exploit prediction
6.21% chance of exploitation in the next 30 days, higher than 93% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 9.3 | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Classification
- Weakness
-
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
- Technology feeds
References
-
secunia.com
/advisories/39206
third-party-advisory, vendor-advisory
-
secunia.com
/advisories/36712
third-party-advisory, vendor-advisory
-
vmware.com
/security/advisories/VMSA-2010-0007.html
vendor-advisory
-
secunia.com
/advisories/39215
third-party-advisory, vendor-advisory
-
secunia.com
/secunia_research/2009-36/
vendor-advisory
-
osvdb.org
/63614
vdb-entry
-
lists.vmware.com
/pipermail/security-announce/2010/000090.html
mailing-list
-
archives.neohapsis.com
/archives/bugtraq/2010-04/0077.html
mailing-list
-
labs.idefense.com
/intelligence/vulnerabilities/display.php?id=866
third-party-advisory
-
securityfocus.com
/bid/39363
vdb-entry
-
securitytracker.com
/id?1023838
vdb-entry
-
archives.neohapsis.com
/archives/fulldisclosure/2010-04/0121.html
mailing-list
Sources
- CVE List CVE-2009-1564
- NVD CVE-2009-1564
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.