6.8

CVE-2008-4279

The CPU hardware emulation for 64-bit guest operating systems in VMware Workstation 6.0.x before 6.0.5 build 109488 and 5.x before 5.5.8 build 108000; Player 2.0.x before 2.0.5 build 109488 and 1.x before 1.0.8; Server 1.x before 1.0.7 build 108231; and ESX 2.5.4 through 3.5 allows authenticated guest OS users to gain additional guest OS privileges by triggering an exception that causes the virtual CPU to perform an indirect jump to a non-canonical address.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
VMware ≫ Player Version >= 1.0 < 1.0.8
VMware ≫ Player Version >= 2.0 < 2.0.5
VMware ≫ Server Version >= 1.0 < 1.0.8
VMware ≫ Workstation Version >= 5.5 < 5.5.8
VMware ≫ Workstation Version >= 6.0 < 6.0.5
VMware ≫ Esx Version >= 2.5.4 <= 3.5
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.39% 0.309
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.8 3.1 10
AV:L/AC:L/Au:S/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://marc.info/?l=bugtraq&m=122331139823057&w=2
Third Party Advisory
Mailing List
http://secunia.com/advisories/32179
Third Party Advisory
http://secunia.com/advisories/32180
Third Party Advisory
http://www.securityfocus.com/archive/1/497041/100/0/threaded
Third Party Advisory
VDB Entry
http://www.vmware.com/security/advisories/VMSA-2008-0016.html
Patch
Vendor Advisory
http://www.vupen.com/english/advisories/2008/2740
Third Party Advisory
http://www.securityfocus.com/bid/31569
Third Party Advisory
VDB Entry
http://lists.grok.org.uk/pipermail/full-disclosure/2008-October/064860.html
Third Party Advisory
http://secunia.com/advisories/32157
Third Party Advisory
http://www.securitytracker.com/id?1020991
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/45668
Third Party Advisory
VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5929
Third Party Advisory