PT-2009-1257 · Vmware · Vmware Player+5

Andrew Honig · Published 2009-04-06 · Updated 2017-09-29 · CVE-2008-4916

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions VMware Workstation versions prior to 5.5.9 build 126128 VMware Workstation versions 6.x prior to 6.5.1 VMware Player versions prior to 1.0.9 build 126128 VMware Player versions 2.x prior to 2.5.1 VMware ACE versions prior to 1.0.8 build 125922 VMware ACE versions 2.x prior to 2.5.1 VMware Server versions 1.x prior to 1.0.8 build 126538 VMware Server versions 2.0.x prior to 2.0.1 build 156745 VMware Fusion versions prior to 2.0.1 VMware ESXi version 3.5 VMware ESX versions 3.0.2, 3.0.3, 3.5

Description The issue allows guest OS users to cause a denial of service, resulting in a host OS crash, via unknown vectors.

Recommendations For VMware Workstation versions prior to 5.5.9 build 126128, update to version 5.5.9 build 126128 or later. For VMware Workstation versions 6.x prior to 6.5.1, update to version 6.5.1 or later. For VMware Player versions prior to 1.0.9 build 126128, update to version 1.0.9 build 126128 or later. For VMware Player versions 2.x prior to 2.5.1, update to version 2.5.1 or later. For VMware ACE versions prior to 1.0.8 build 125922, update to version 1.0.8 build 125922 or later. For VMware ACE versions 2.x prior to 2.5.1, update to version 2.5.1 or later. For VMware Server versions 1.x prior to 1.0.8 build 126538, update to version 1.0.8 build 126538 or later. For VMware Server versions 2.0.x prior to 2.0.1 build 156745, update to version 2.0.1 build 156745 or later. For VMware Fusion versions prior to 2.0.1, update to version 2.0.1 or later. For VMware ESXi version 3.5, update to a later version. For VMware ESX versions 3.0.2, 3.0.3, 3.5, update to a later version.

Fix

Related Identifiers

CVE-2008-4916

Affected Products

Vmware Ace

Vmware Esxi

Vmware Fusion

Vmware Player

Vmware Server

Vmware Workstation

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2008-4916 · Security Note
• http://security.gentoo.org/glsa/glsa-201209-25.xml · Vendor Advisory
• http://vmware.com/security/advisories/VMSA-2009-0005.html · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6439 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4916 · Note
• http://seclists.org/fulldisclosure/2009/Apr/0036.html · Note
• http://lists.vmware.com/pipermail/security-announce/2009/000054.html · Note
• http://vupen.com/english/advisories/2009/0944 · Note
• http://securitytracker.com/id?1021973 · Note
• http://securityfocus.com/bid/34373 · Note