7.2

CVE-2008-3698

Unspecified vulnerability in the OpenProcess function in VMware Workstation 5.5.x before 5.5.8 build 108000, VMware Workstation 6.0.x before 6.0.5 build 109488, VMware Player 1.x before 1.0.8 build 108000, VMware Player 2.x before 2.0.5 build 109488, VMware ACE 1.x before 1.0.7 build 108880, VMware ACE 2.x before 2.0.5 build 109488, and VMware Server before 1.0.7 build 108231 on Windows allows local host OS users to gain privileges on the host OS via unknown vectors.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
VMware ≫ Ace Version >= 1.0 < 1.0.7
VMware ≫ Ace Version >= 2.0 < 2.0.5
VMware ≫ Player Version >= 1.0.0 < 1.0.8
VMware ≫ Player Version >= 2.0 < 2.0.5
VMware ≫ Server Version < 1.0.7
VMware ≫ Workstation Version >= 5.5 < 5.5.8
VMware ≫ Workstation Version >= 6.0 < 6.0.5
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.46% 0.361
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html
Vendor Advisory
http://www.vmware.com/support/player/doc/releasenotes_player.html
Vendor Advisory
http://www.vmware.com/support/player2/doc/releasenotes_player2.html
Vendor Advisory
http://www.vmware.com/support/server/doc/releasenotes_server.html
Vendor Advisory
http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html
Vendor Advisory
http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html
Vendor Advisory
http://www.vmware.com/support/ace/doc/releasenotes_ace.html
Vendor Advisory
http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/064118.html
Third Party Advisory
http://www.securityfocus.com/archive/1/495869/100/0/threaded
Third Party Advisory
VDB Entry
http://www.vmware.com/security/advisories/VMSA-2008-0014.html
Vendor Advisory
http://www.vupen.com/english/advisories/2008/2466
Third Party Advisory
http://secunia.com/advisories/31707
Patch
Third Party Advisory
http://securityreason.com/securityalert/4202
Third Party Advisory
http://securitytracker.com/id?1020790
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/30936
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/44795
VDB Entry