CVE-2008-4915 The CPU hardware emulation in VMware Workstation 6.0.5 and earlier and 5.5.8 and earlier; Player 2.0.x through 2.0.5 and 1.0.x through 1.0.8; ACE 2.0.x through 2.0.5 and earlier, and 1.0.x through 1.0...
MediumCVSS 6.9
EPSS 0.41%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The CPU hardware emulation in VMware Workstation 6.0.5 and earlier and 5.5.8 and earlier; Player 2.0.x through 2.0.5 and 1.0.x through 1.0.8; ACE 2.0.x through 2.0.5 and earlier, and 1.0.x through 1.0.7; Server 1.0.x through 1.0.7; ESX 2.5.4 through 3.5; and ESXi 3.5, when running 32-bit and 64-bit guest operating systems, does not properly handle the Trap flag, which allows authenticated guest OS users to gain privileges on the guest OS.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| VMware ace | >= 1.0, <= 1.0.7 | No fix listed |
| VMware ace | >= 2.0, <= 2.0.5 | No fix listed |
| VMware ESX | >= 2.5.4, <= 3.5 | No fix listed |
| VMware esxi | = 3.5 | No fix listed |
| VMware player | >= 1.0.0, <= 1.0.8 | No fix listed |
| VMware player | >= 2.0, <= 2.0.5 | No fix listed |
| VMware server | >= 1.0, <= 1.0.7 | No fix listed |
| VMware Workstation | >= 5.5, <= 5.5.8 | No fix listed |
| VMware Workstation | >= 6.0, <= 6.0.5 | No fix listed |
References
- [Security-announce] 20081106 VMSA-2008-0018 VMware Hosted products and patches for ESX and ESXi resolve two security issues mailing-list vendor-advisory
- 32612 third-party-advisory
- 32624 third-party-advisory
- GLSA-201209-25 third-party-advisory vendor-advisory
- 20081107 VMSA-2008-0018 VMware Hosted products and patches for ESX and ESXi resolve two security issues mailing-list third-party-advisory vdb-entry
- 32168 third-party-advisory vdb-entry
- 1021154 third-party-advisory vdb-entry
- www.vmware.com vendor-advisory
- ADV-2008-3052 third-party-advisory vdb-entry
- vmware-cpuhardware-priv-escalation(46415) third-party-advisory vdb-entry
- oval:org.mitre.oval:def:6309 signature third-party-advisory vdb-entry