PT-2009-1257 · Vmware · Vmware Player+5

Andrew Honig · Publicado 2009-04-06 · Atualizado 2017-09-29 · CVE-2008-4916

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions VMware Workstation versions prior to 5.5.9 build 126128 VMware Workstation versions 6.x prior to 6.5.1 VMware Player versions prior to 1.0.9 build 126128 VMware Player versions 2.x prior to 2.5.1 VMware ACE versions prior to 1.0.8 build 125922 VMware ACE versions 2.x prior to 2.5.1 VMware Server versions 1.x prior to 1.0.8 build 126538 VMware Server versions 2.0.x prior to 2.0.1 build 156745 VMware Fusion versions prior to 2.0.1 VMware ESXi version 3.5 VMware ESX versions 3.0.2, 3.0.3, 3.5

Description The issue allows guest OS users to cause a denial of service, resulting in a host OS crash, via unknown vectors.

Recommendations For VMware Workstation versions prior to 5.5.9 build 126128, update to version 5.5.9 build 126128 or later. For VMware Workstation versions 6.x prior to 6.5.1, update to version 6.5.1 or later. For VMware Player versions prior to 1.0.9 build 126128, update to version 1.0.9 build 126128 or later. For VMware Player versions 2.x prior to 2.5.1, update to version 2.5.1 or later. For VMware ACE versions prior to 1.0.8 build 125922, update to version 1.0.8 build 125922 or later. For VMware ACE versions 2.x prior to 2.5.1, update to version 2.5.1 or later. For VMware Server versions 1.x prior to 1.0.8 build 126538, update to version 1.0.8 build 126538 or later. For VMware Server versions 2.0.x prior to 2.0.1 build 156745, update to version 2.0.1 build 156745 or later. For VMware Fusion versions prior to 2.0.1, update to version 2.0.1 or later. For VMware ESXi version 3.5, update to a later version. For VMware ESX versions 3.0.2, 3.0.3, 3.5, update to a later version.

Correção

Identificadores relacionados

CVE-2008-4916

Produtos afetados

Vmware Ace

Vmware Esxi

Vmware Fusion

Vmware Player

Vmware Server

Vmware Workstation

Referências · 10

• http://vmware.com/security/advisories/VMSA-2009-0005.html · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6439 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4916 · Nota
• http://seclists.org/fulldisclosure/2009/Apr/0036.html · Nota
• http://lists.vmware.com/pipermail/security-announce/2009/000054.html · Nota
• http://vupen.com/english/advisories/2009/0944 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-4916 · Nota de Segurança
• http://securitytracker.com/id?1021973 · Nota
• http://securityfocus.com/bid/34373 · Nota
• http://security.gentoo.org/glsa/glsa-201209-25.xml · Aviso do Fabricante