CVEvulnerability
CVE-2008-1392
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-03-20
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-16
Description
The default configuration of VMware Workstation 6.0.2, VMware Player 2.0.x before 2.0.3, and VMware ACE 2.0.x before 2.0.1 makes the console of the guest OS accessible through anonymous VIX API calls, which has unknown impact and attack vectors.
Affected configurations
• vmware ace (<= 2.0)
• vmware player (<= 2.0.2)
• vmware vmware workstation 6.0.2
Related
Weakness · not in database (1)
References
- http://lists.vmware.com/pipermail/security-announce/2008/000008.html lists.vmware.com
- http://security.gentoo.org/glsa/glsa-201209-25.xml security.gentoo.org
- http://securityreason.com/securityalert/3755 securityreason.com
- http://www.securityfocus.com/archive/1/489739/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/28276 www.securityfocus.com
- http://www.vmware.com/security/advisories/VMSA-2008-0005.html Patch, Vendor Advisory
- http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html Patch, Vendor Advisory
- http://www.vmware.com/support/player2/doc/releasenotes_player2.html Patch, Vendor Advisory
- http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html www.vmware.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41551 exchange.xforce.ibmcloud.com
- http://lists.vmware.com/pipermail/security-announce/2008/000008.html lists.vmware.com
- http://security.gentoo.org/glsa/glsa-201209-25.xml security.gentoo.org
- http://securityreason.com/securityalert/3755 securityreason.com
- http://www.securityfocus.com/archive/1/489739/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/28276 www.securityfocus.com
- http://www.vmware.com/security/advisories/VMSA-2008-0005.html Patch, Vendor Advisory
- http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html Patch, Vendor Advisory
- http://www.vmware.com/support/player2/doc/releasenotes_player2.html Patch, Vendor Advisory
- http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html www.vmware.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41551 exchange.xforce.ibmcloud.com