Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2008-2100

Multiple buffer overflows in VIX API 1.1.x before 1.1.4 build 93057 on VMware Workstation 5.x and 6.x, VMware Player 1.x and 2.x, VMware ACE 2.x, VMware Server 1.x, VMware Fusion 1.x, VMware ESXi 3.5, and VMware ESX 3.0.1 through 3.5 allow guest OS users to execute arbitrary code on the host OS via unspecified vectors.

Published

2008-06-05T20:32:00.000

Last Modified

2025-04-09T00:30:58.490

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 7.2 (HIGH)

CVSSv2 Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Access Vector: LOCAL
Access Complexity: LOW
Authentication: NONE
Confidentiality Impact: COMPLETE
Integrity Impact: COMPLETE
Availability Impact: COMPLETE

Exploitability Score

3.9

Impact Score

10.0

Weaknesses

Type: Primary
CWE-119
NVD-CWE-noinfo

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	vmware	ace	≤ 1.0.5	Yes
Application	vmware	ace	≤ 2.0.3	Yes
Application	vmware	esx_server	3.0	Yes
Application	vmware	esx_server	3.5	Yes
Application	vmware	esxi	3.5	Yes
Application	vmware	fusion	≤ 1.1.1	Yes
Application	vmware	player	≤ 1.0.6	Yes
Application	vmware	player	≤ 2.0.3	Yes
Application	vmware	server	≤ 1.0.5	Yes
Application	vmware	workstation	≤ 5.5.6	Yes
Application	vmware	workstation	≤ 6.0.3	Yes
Operating System	vmware	esx	2.5.4	Yes
Operating System	vmware	esx	2.5.5	Yes
Operating System	vmware	esx	3.0.0	Yes
Operating System	vmware	esx	3.0.1	Yes
Operating System	vmware	esx	3.0.2	Yes
Operating System	vmware	esx	3.5	Yes

References

http://secunia.com/advisories/30556 Third Party Advisory ([email protected])
http://security.gentoo.org/glsa/glsa-201209-25.xml Third Party Advisory ([email protected])
http://securityreason.com/securityalert/3922 Third Party Advisory ([email protected])
http://securitytracker.com/id?1020200 Third Party Advisory, VDB Entry ([email protected])
http://www.securityfocus.com/archive/1/493080/100/0/threaded Third Party Advisory, VDB Entry ([email protected])
http://www.securityfocus.com/bid/29552 Third Party Advisory, VDB Entry ([email protected])
http://www.vmware.com/security/advisories/VMSA-2008-0009.html Vendor Advisory ([email protected])
http://www.vupen.com/english/advisories/2008/1744 Permissions Required ([email protected])
https://exchange.xforce.ibmcloud.com/vulnerabilities/42872 Third Party Advisory, VDB Entry ([email protected])
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5081 Third Party Advisory ([email protected])
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5647 Third Party Advisory ([email protected])
http://secunia.com/advisories/30556 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://security.gentoo.org/glsa/glsa-201209-25.xml Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://securityreason.com/securityalert/3922 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://securitytracker.com/id?1020200 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/archive/1/493080/100/0/threaded Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/29552 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://www.vmware.com/security/advisories/VMSA-2008-0009.html Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2008/1744 Permissions Required (af854a3a-2127-422b-91ae-364da2661108)
https://exchange.xforce.ibmcloud.com/vulnerabilities/42872 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5081 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5647 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)