CVE-2008-4915

EUVD-2008-4894
The CPU hardware emulation in VMware Workstation 6.0.5 and earlier and 5.5.8 and earlier; Player 2.0.x through 2.0.5 and 1.0.x through 1.0.8; ACE 2.0.x through 2.0.5 and earlier, and 1.0.x through 1.0.7; Server 1.0.x through 1.0.7; ESX 2.5.4 through 3.5; and ESXi 3.5, when running 32-bit and 64-bit guest operating systems, does not properly handle the Trap flag, which allows authenticated guest OS users to gain privileges on the guest OS.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.9 UNKNOWN
LOCAL
MEDIUM
AV:L/AC:M/Au:N/C:C/I:C/A:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 21%
Affected Products (NVD)
VendorProductVersion
vmwareace
1.0 ≤
𝑥
≤ 1.0.7
vmwareace
2.0 ≤
𝑥
≤ 2.0.5
vmwareesx
2.5.4 ≤
𝑥
≤ 3.5
vmwareesxi
3.5
vmwareplayer
1.0.0 ≤
𝑥
≤ 1.0.8
vmwareplayer
2.0 ≤
𝑥
≤ 2.0.5
vmwareserver
1.0 ≤
𝑥
≤ 1.0.7
vmwareworkstation
5.5 ≤
𝑥
≤ 5.5.8
vmwareworkstation
6.0 ≤
𝑥
≤ 6.0.5
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
vmware-player
dapper
ignored
gutsy
dne
hardy
dne
intrepid
dne
jaunty
dne
karmic
dne
vmware-server
dapper
dne
gutsy
dne
hardy
dne
intrepid
dne
jaunty
dne
karmic
dne
Common Weakness Enumeration