CVE-2008-1362

EUVD-2008-1369
VMware Workstation 6.0.x before 6.0.3 and 5.5.x before 5.5.6, VMware Player 2.0.x before 2.0.3 and 1.0.x before 1.0.6, VMware ACE 2.0.x before 2.0.1 and 1.0.x before 1.0.5, and VMware Server 1.0.x before 1.0.5 on Windows allow local users to gain privileges or cause a denial of service by impersonating the authd process through an unspecified use of an "insecurely created named pipe," a different vulnerability than CVE-2008-1361.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.2 UNKNOWN
LOCAL
LOW
AV:L/AC:L/Au:N/C:C/I:C/A:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 9%
Affected Products (NVD)
VendorProductVersion
vmwareace
1.0
vmwareace
2.0
vmwareplayer
1.0.2
vmwareplayer
1.0.3
vmwareplayer
1.0.4
vmwareplayer
1.0.5
vmwareplayer
2.0
vmwareplayer
2.0.1
vmwareplayer
2.0.2
vmwareserver
1.0.3
vmwarevmware_server
1.0.2
vmwarevmware_server
1.0.4
vmwarevmware_workstation
5.5.5
vmwarevmware_workstation
6.0.1
vmwarevmware_workstation
6.0.2
vmwareworkstation
5.5
vmwareworkstation
5.5.3_build_34685:_build_34685
vmwareworkstation
5.5.3_build_42958:_build_42958
vmwareworkstation
5.5.4
vmwareworkstation
5.5.4_build_44386:_build_44386
vmwareworkstation
6.0
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
vmware-player
dapper
ignored
edgy
ignored
feisty
ignored
gutsy
dne
vmware-server
dapper
dne
edgy
dne
feisty
ignored
gutsy
ignored
Common Weakness Enumeration
References