CVE-2008-4915

The CPU hardware emulation in VMware Workstation 6.0.5 and earlier and 5.5.8 and earlier; Player 2.0.x through 2.0.5 and 1.0.x through 1.0.8; ACE 2.0.x through 2.0.5 and earlier, and 1.0.x through 1.0.7; Server 1.0.x through 1.0.7; ESX 2.5.4 through 3.5; and ESXi 3.5, when running 32-bit and 64-bit guest operating systems, does not properly handle the Trap flag, which allows authenticated guest OS users to gain privileges on the guest OS.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
6.9 UNKNOWN
LOCAL
MEDIUM
AV:L/AC:M/Au:N/C:C/I:C/A:C
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 23%
VendorProductVersion
vmwareace
1.0 ≤
𝑥
≤ 1.0.7
vmwareace
2.0 ≤
𝑥
≤ 2.0.5
vmwareesx
2.5.4 ≤
𝑥
≤ 3.5
vmwareesxi
3.5
vmwareplayer
1.0.0 ≤
𝑥
≤ 1.0.8
vmwareplayer
2.0 ≤
𝑥
≤ 2.0.5
vmwareserver
1.0 ≤
𝑥
≤ 1.0.7
vmwareworkstation
5.5 ≤
𝑥
≤ 5.5.8
vmwareworkstation
6.0 ≤
𝑥
≤ 6.0.5
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
vmware-player
karmic
dne
jaunty
dne
intrepid
dne
hardy
dne
gutsy
dne
dapper
ignored
vmware-server
karmic
dne
jaunty
dne
intrepid
dne
hardy
dne
gutsy
dne
dapper
dne
Common Weakness Enumeration