Buffer overflow in VMware Ace
CVE-2008-2100
Multiple buffer overflows in VIX API 1.1.x before 1.1.4 build 93057 on VMware Workstation 5.x and 6.x, VMware Player 1.x and 2.x, VMware ACE 2.x, VMware Server 1.x, VMware Fusion 1.x, VMware ESXi 3.5, and VMware ESX 3.0.1 through 3.5 allow guest OS users to execute arbitrary code on the host OS via unspecified vectors.
Vulnerability class: Buffer Overflow
EPSS: 0.006 (46.4th percentile) — read the EPSS interpretation.
Affected products
- Vmware Ace
- Vmware Esx — versions 2.5.4, 2.5.5, 3.0.0
- Vmware Esxi — versions 3.5
- Vmware Esx_server — versions 3.0, 3.5
- Vmware Fusion
- Vmware Player
- Vmware Server
- Vmware Workstation
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (vendor-advisory, Third Party Advisory, x_refsource_GENTOO)
- cve@mitre.org (Permissions Required, vdb-entry, x_refsource_VUPEN)
- cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK)
- cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_XF)
- cve@mitre.org (signature, x_refsource_OVAL, Third Party Advisory, vdb-entry)
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
- cve@mitre.org (x_refsource_SECUNIA, Third Party Advisory, third-party-advisory)
- cve@mitre.org (signature, x_refsource_OVAL, Third Party Advisory, vdb-entry)
- cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ, VDB Entry, Third Party Advisory)