CVE-2008-2100

EUVD-2008-2097
Multiple buffer overflows in VIX API 1.1.x before 1.1.4 build 93057 on VMware Workstation 5.x and 6.x, VMware Player 1.x and 2.x, VMware ACE 2.x, VMware Server 1.x, VMware Fusion 1.x, VMware ESXi 3.5, and VMware ESX 3.0.1 through 3.5 allow guest OS users to execute arbitrary code on the host OS via unspecified vectors.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.2 UNKNOWN
LOCAL
LOW
AV:L/AC:L/Au:N/C:C/I:C/A:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 35%
Affected Products (NVD)
VendorProductVersion
vmwareace
1.0 ≤
𝑥
≤ 1.0.5
vmwareace
2.0 ≤
𝑥
≤ 2.0.3
vmwareesx_server
3.0
vmwareesx_server
3.5
vmwareesxi
3.5
vmwarefusion
𝑥
≤ 1.1.1
vmwareplayer
1.0.0 ≤
𝑥
≤ 1.0.6
vmwareplayer
2.0 ≤
𝑥
≤ 2.0.3
vmwareserver
𝑥
≤ 1.0.5
vmwareworkstation
5.5 ≤
𝑥
≤ 5.5.6
vmwareworkstation
6.0 ≤
𝑥
≤ 6.0.3
vmwareesx
2.5.4
vmwareesx
2.5.5
vmwareesx
3.0.0
vmwareesx
3.0.1
vmwareesx
3.0.2
vmwareesx
3.5
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
vmware-server
dapper
dne
feisty
ignored
gutsy
dne
hardy
dne
intrepid
dne