CVE-2010-1138

CVE-2010-1138 describes an information disclosure vulnerability in the virtual networking stack of several VMware products, including Workstation, Player, ACE, Server, and Fusion. A remote attacker could exploit this flaw to obtain sensitive information from the host OS memory by analyzing network packets, stemming from interactions between the guest OS and the host vmware-vmx process. With a CVSS score of 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N), this vulnerability is of medium severity, indicating a remote attack with low complexity that could lead to partial confidentiality impact. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.