Denial of Service in VMware Workstation and Player
CVE-2009-0177

Currently unrated

Key Information:

Vendor: Vmware
Status: Ace; Vmware Player; Vmware Workstation; Server
Vendor: CVE Published:; 20 January 2009

Badges

👾 Exploit Exists🟡 Public PoC🟣 EPSS 14%

What is CVE-2009-0177?

The vmwarebase.dll component in VMware Workstation, Player, ACE, Server, and Fusion versions before the specified builds has a flaw that allows remote attackers to trigger a denial of service by sending overly long USER or PASS commands. This results in a crash of the vmware-authd service, potentially disrupting services and affecting availability.

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2009-0177 - Proof of Concept