CVE-2009-1565 in the critical feed json
vmnc.dll in the VMnc media codec in VMware Movie Decoder before 6.5.4 Build 246459 on Windows, and the movie decoder in VMware Workstation…
published 2010-04-12 16 y ago modified 2026-06-16 4 mo ago also EUVD-2009-1561
- cvss
- 9.3
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 6.2%
- EPSS 6.2% chance of exploitation in 30 days, percentile 93%
- public exploits
- 0
- none known
Summary
vmnc.dll in the VMnc media codec in VMware Movie Decoder before 6.5.4 Build 246459 on Windows, and the movie decoder in VMware Workstation 6.5.x before 6.5.4 build 246459, VMware Player 2.5.x before 2.5.4 build 246459, and VMware Server 2.x on Windows, allows remote attackers to execute arbitrary code via an AVI file with crafted HexTile-encoded video chunks that trigger heap-based buffer overflows, related to "integer truncation errors."
Patch / fix
Exploit prediction
6.21% chance of exploitation in the next 30 days, higher than 93% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 9.3 | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Classification
- Weakness
-
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
- Technology feeds
References
-
lists.vmware.com
/pipermail/security-announce/2010/000090.html
mailing-list, patch
-
vmware.com
/security/advisories/VMSA-2010-0007.html
patch
-
secunia.com
/advisories/39206
third-party-advisory, vendor-advisory
-
secunia.com
/advisories/36712
third-party-advisory, vendor-advisory
-
secunia.com
/secunia_research/2009-37/
vendor-advisory
-
secunia.com
/advisories/39215
third-party-advisory, vendor-advisory
-
archives.neohapsis.com
/archives/bugtraq/2010-04/0077.html
mailing-list
-
osvdb.org
/63615
vdb-entry
-
securitytracker.com
/id?1023838
vdb-entry
-
securityfocus.com
/bid/39364
vdb-entry
-
archives.neohapsis.com
/archives/fulldisclosure/2010-04/0121.html
mailing-list
Sources
- CVE List CVE-2009-1565
- NVD CVE-2009-1565
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.