PT-2008-6093 · Vmware · Vmware Player+3
Published
2008-12-09
·
Updated
2018-11-02
·
CVE-2008-4917
CVSS v2.0
7.2
High
| Vector | AV:L/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
VMware Workstation versions 5.5.8 and earlier
VMware Workstation versions 6.0.5 and earlier
VMware Player versions 1.0.8 and earlier
VMware Player versions 2.0.5 and earlier
VMware Server version 1.0.9 and earlier
VMware ESXi version 3.5
VMware ESX versions 3.0.2 through 3.5
Description
The issue allows guest OS users to send a request to the virtual hardware, triggering an arbitrary physical-memory write operation. This leads to memory corruption, potentially having an unknown impact.
Recommendations
For VMware Workstation versions 5.5.8 and earlier, update to a version later than 5.5.8.
For VMware Workstation versions 6.0.5 and earlier, update to a version later than 6.0.5.
For VMware Player versions 1.0.8 and earlier, update to a version later than 1.0.8.
For VMware Player versions 2.0.5 and earlier, update to a version later than 2.0.5.
For VMware Server version 1.0.9 and earlier, update to a version later than 1.0.9.
For VMware ESXi version 3.5, update to a version later than 3.5.
For VMware ESX versions 3.0.2 through 3.5, update to a version later than 3.5.
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Vmware Esxi
Vmware Player
Vmware Server
Vmware Workstation