Vulnerability in VMware Esx
CVE-2008-4917
Unspecified vulnerability in VMware Workstation 5.5.8 and earlier, and 6.0.5 and earlier 6.x versions; VMware Player 1.0.8 and earlier, and 2.0.5 and earlier 2.x versions; VMware Server 1.0.9 and earlier; VMware ESXi 3.5; and VMware ESX 3.0.2 through 3.5 allows guest OS users to have an unknown impact by sending the virtual hardware a request that triggers an arbitrary physical-memory write operation, leading to memory corruption.
Published · last modified .
CVSS v2 metric
CVSS v2 base score 7.2 (High). Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.005 (37.7th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 38th percentile — 37.7% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.005 · newest: 0.005 · change: 0.000
Affected products
Weakness classification (CWE)
References
- security.gentoo.org/glsa/glsa-201209-25.xml (vendor-advisory, Third Party Advisory)
- kb.vmware.com/kb/1006980 (Patch, Vendor Advisory)
- www.securityfocus.com/archive/1/498863/100/0/threaded (mailing-list, VDB Entry, Third Party Advisory)
- oval.cisecurity.org/repository/search/definition/oval:org.mitre.oval:def:6246 (signature, Third Party Advisory, vdb-entry)
- secunia.com/advisories/32965 (Third Party Advisory, third-party-advisory)
- kb.vmware.com/kb/1006986 (Vendor Advisory)
- www.securityfocus.com/archive/1/498886/100/0/threaded (mailing-list, VDB Entry, Third Party Advisory)
- securitytracker.com/id (VDB Entry, Third Party Advisory, vdb-entry)
- securitytracker.com/id (VDB Entry, Third Party Advisory, vdb-entry)
- www.securityfocus.com/bid/32597 (VDB Entry, Third Party Advisory, vdb-entry)