CVE-2008-1340 Virtual Machine Communication Interface (VMCI) in VMware Workstation 6.0.x before 6.0.3, VMware Player 2.0.x before 2.0.3, and VMware ACE 2.0.x before 2.0.1 allows attackers to cause a denial of servi...
HighCVSS 7.1
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Virtual Machine Communication Interface (VMCI) in VMware Workstation 6.0.x before 6.0.3, VMware Player 2.0.x before 2.0.3, and VMware ACE 2.0.x before 2.0.1 allows attackers to cause a denial of service (host OS crash) via crafted VMCI calls that trigger "memory exhaustion and memory corruption."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| VMware ace | = 1.0 | No fix listed |
| VMware ace | = 2.0 | No fix listed |
| VMware player | = 1.0.2 | No fix listed |
| VMware player | = 1.0.3 | No fix listed |
| VMware player | = 1.0.4 | No fix listed |
| VMware player | = 1.0.5 | No fix listed |
| VMware player | = 2.0 | No fix listed |
| VMware player | = 2.0.1 | No fix listed |
| VMware player | = 2.0.2 | No fix listed |
| VMware server | = 1.0.3 | No fix listed |
| vmware server | = 1.0.2 | No fix listed |
| vmware server | = 1.0.4 | No fix listed |
| vmware workstation | = 5.5.5 | No fix listed |
| vmware workstation | = 6.0.1 | No fix listed |
| vmware workstation | = 6.0.2 | No fix listed |
| VMware Workstation | = 5.5 | No fix listed |
| VMware Workstation | = 5.5.3_build_34685 | No fix listed |
| VMware Workstation | = 5.5.3_build_42958 | No fix listed |
| VMware Workstation | = 5.5.4 | No fix listed |
| VMware Workstation | = 5.5.4_build_44386 | No fix listed |
| VMware Workstation | = 6.0 | No fix listed |
References
- [security-announce] 20080317 VMSA-2008-0005 Updated VMware Workstation, VMware Player, VMware Server, VMware ACE, and VMware Fusion resolve critical security issues mailing-list patch
- GLSA-201209-25 vendor-advisory
- 3755 third-party-advisory
- 1019624 vdb-entry
- 20080318 VMSA-2008-0005 Updated VMware Workstation, VMware Player, VMware Server, VMware ACE, and VMware Fusion resolve critical security issues mailing-list
- 28276 patch vdb-entry
- 28289 vdb-entry
- www.vmware.com patch
- www.vmware.com patch
- www.vmware.com patch
- www.vmware.com patch
- ADV-2008-0905 vdb-entry
- vmware-vmci-dos(41250) vdb-entry