CVEvulnerability
CVE-2008-2100
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-06-05
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Multiple buffer overflows in VIX API 1.1.x before 1.1.4 build 93057 on VMware Workstation 5.x and 6.x, VMware Player 1.x and 2.x, VMware ACE 2.x, VMware Server 1.x, VMware Fusion 1.x, VMware ESXi 3.5, and VMware ESX 3.0.1 through 3.5 allow guest OS users to execute arbitrary code on the host OS via unspecified vectors.
Affected configurations
• vmware ace (>= 1.0 <= 1.0.5)
• vmware ace (>= 2.0 <= 2.0.3)
• vmware esx server 3.0
• vmware esx server 3.5
• vmware esxi 3.5
• vmware fusion (<= 1.1.1)
• vmware player (>= 1.0.0 <= 1.0.6)
• vmware player (>= 2.0 <= 2.0.3)
• vmware server (<= 1.0.5)
• vmware workstation (>= 5.5 <= 5.5.6)
• vmware workstation (>= 6.0 <= 6.0.3)
• vmware esx 2.5.4
• vmware esx 2.5.5
• vmware esx 3.0.0
• vmware esx 3.0.1
• vmware esx 3.0.2
• vmware esx 3.5
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://secunia.com/advisories/30556 Third Party Advisory
- http://security.gentoo.org/glsa/glsa-201209-25.xml Third Party Advisory
- http://securityreason.com/securityalert/3922 Third Party Advisory
- http://securitytracker.com/id?1020200 Third Party Advisory, VDB Entry
- http://www.securityfocus.com/archive/1/493080/100/0/threaded Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/29552 Third Party Advisory, VDB Entry
- http://www.vmware.com/security/advisories/VMSA-2008-0009.html Vendor Advisory
- http://www.vupen.com/english/advisories/2008/1744 Permissions Required
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42872 Third Party Advisory, VDB Entry
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5081 Third Party Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5647 Third Party Advisory
- http://secunia.com/advisories/30556 Third Party Advisory
- http://security.gentoo.org/glsa/glsa-201209-25.xml Third Party Advisory
- http://securityreason.com/securityalert/3922 Third Party Advisory
- http://securitytracker.com/id?1020200 Third Party Advisory, VDB Entry
- http://www.securityfocus.com/archive/1/493080/100/0/threaded Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/29552 Third Party Advisory, VDB Entry
- http://www.vmware.com/security/advisories/VMSA-2008-0009.html Vendor Advisory
- http://www.vupen.com/english/advisories/2008/1744 Permissions Required
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42872 Third Party Advisory, VDB Entry
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5081 Third Party Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5647 Third Party Advisory