Vulnerability CVE-2008-2100
Published: 2008-06-05   Modified: 2012-02-12

Description:
Multiple buffer overflows in VIX API 1.1.x before 1.1.4 build 93057 on VMware Workstation 5.x and 6.x, VMware Player 1.x and 2.x, VMware ACE 2.x, VMware Server 1.x, VMware Fusion 1.x, VMware ESXi 3.5, and VMware ESX 3.0.1 through 3.5 allow guest OS users to execute arbitrary code on the host OS via unspecified vectors.

See advisories in our WLB2 database:
Topic
Author
Date
High
Updates to VMware Workstation, VMware Player, VMware ACE, VMware Fusion, VMware Server, VMware VIX API, VMware ESX, VMware ESXi
VMware Security ...
07.06.2008

Type:

CWE-noinfo

CVSS2 => (AV:L/AC:L/Au:N/C:C/I:C/A:C)

CVSS Base Score
Impact Subscore
Exploitability Subscore
7.2/10
10/10
3.9/10
Exploit range
Attack complexity
Authentication
Local
Low
No required
Confidentiality impact
Integrity impact
Availability impact
Complete
Complete
Complete
Affected software
Vmware -> ACE 
Vmware -> Esx server 
Vmware -> ESXI 
Vmware -> Fusion 
Vmware -> Player 
Vmware -> Server 
Vmware -> Vmware server 
Vmware -> Vmware workstation 
Vmware -> Workstation 
Vmware -> ESX 

 References:
http://security.gentoo.org/glsa/glsa-201209-25.xml
http://securityreason.com/securityalert/3922
http://securitytracker.com/id?1020200
http://www.securityfocus.com/archive/1/493080/100/0/threaded
http://www.securityfocus.com/bid/29552
http://www.vmware.com/security/advisories/VMSA-2008-0009.html
http://www.vupen.com/english/advisories/2008/1744
https://exchange.xforce.ibmcloud.com/vulnerabilities/42872
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5081
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5647
Copyright 2024, cxsecurity.com

 

Back to Top