CVE-2008-3698 Unspecified vulnerability in the OpenProcess function in VMware Workstation 5.5.x before 5.5.8 build 108000, VMware Workstation 6.0.x before 6.0.5 build 109488, VMware Player 1.x before 1.0.8 build 10...
HighCVSS 7.2
EPSS 0.46%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unspecified vulnerability in the OpenProcess function in VMware Workstation 5.5.x before 5.5.8 build 108000, VMware Workstation 6.0.x before 6.0.5 build 109488, VMware Player 1.x before 1.0.8 build 108000, VMware Player 2.x before 2.0.5 build 109488, VMware ACE 1.x before 1.0.7 build 108880, VMware ACE 2.x before 2.0.5 build 109488, and VMware Server before 1.0.7 build 108231 on Windows allows local host OS users to gain privileges on the host OS via unknown vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| VMware ace | >= 1.0, < 1.0.7 | 1.0.7 |
| VMware ace | >= 2.0, < 2.0.5 | 2.0.5 |
| VMware player | >= 1.0.0, < 1.0.8 | 1.0.8 |
| VMware player | >= 2.0, < 2.0.5 | 2.0.5 |
| VMware server | < 1.0.7 | 1.0.7 |
| VMware Workstation | >= 5.5, < 5.5.8 | 5.5.8 |
| VMware Workstation | >= 6.0, < 6.0.5 | 6.0.5 |
References
- 20080830 VMSA-2008-0014 Updates to VMware Workstation, VMware Player, VMware ACE, VMware Server, VMware ESX address information disclosure, privilege escalation and other security issues. mailing-list third-party-advisory
- 31707 patch third-party-advisory
- 4202 third-party-advisory
- 1020790 third-party-advisory vdb-entry
- 20080830 VMSA-2008-0014 Updates to VMware Workstation, VMware Player, VMware ACE, VMware Server, VMware ESX address information disclosure, privilege escalation and other security issues. mailing-list third-party-advisory vdb-entry
- 30936 third-party-advisory vdb-entry
- www.vmware.com vendor-advisory
- www.vmware.com vendor-advisory
- www.vmware.com vendor-advisory
- www.vmware.com vendor-advisory
- www.vmware.com vendor-advisory
- www.vmware.com vendor-advisory
- www.vmware.com vendor-advisory
- www.vmware.com vendor-advisory
- ADV-2008-2466 third-party-advisory vdb-entry
- vmware-openprocess-privilege-escalation(44795) vdb-entry