CVE-2008-2100

Опубликовано: 05 июн. 2008

Источник: nvd

CVSS2: 7.2

EPSS Низкий

Описание

Multiple buffer overflows in VIX API 1.1.x before 1.1.4 build 93057 on VMware Workstation 5.x and 6.x, VMware Player 1.x and 2.x, VMware ACE 2.x, VMware Server 1.x, VMware Fusion 1.x, VMware ESXi 3.5, and VMware ESX 3.0.1 through 3.5 allow guest OS users to execute arbitrary code on the host OS via unspecified vectors.

Ссылки

http://secunia.com/advisories/30556
Third Party Advisory
http://security.gentoo.org/glsa/glsa-201209-25.xml
Third Party Advisory
http://securityreason.com/securityalert/3922
Third Party Advisory
http://securitytracker.com/id?1020200
Third Party Advisory
VDB Entry
http://www.securityfocus.com/archive/1/493080/100/0/threaded
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/29552
Third Party Advisory
VDB Entry
http://www.vmware.com/security/advisories/VMSA-2008-0009.html
Vendor Advisory
http://www.vupen.com/english/advisories/2008/1744
Permissions Required
https://exchange.xforce.ibmcloud.com/vulnerabilities/42872
Third Party Advisory
VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5081
Third Party Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5647
Third Party Advisory
http://secunia.com/advisories/30556
Third Party Advisory
http://security.gentoo.org/glsa/glsa-201209-25.xml
Third Party Advisory
http://securityreason.com/securityalert/3922
Third Party Advisory
http://securitytracker.com/id?1020200
Third Party Advisory
VDB Entry
http://www.securityfocus.com/archive/1/493080/100/0/threaded
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/29552
Third Party Advisory
VDB Entry
http://www.vmware.com/security/advisories/VMSA-2008-0009.html
Vendor Advisory
http://www.vupen.com/english/advisories/2008/1744
Permissions Required
https://exchange.xforce.ibmcloud.com/vulnerabilities/42872
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:vmware:ace:*:*:*:*:*:*:*:*

Версия от 1.0 (включая) до 1.0.5 (включая)

cpe:2.3:a:vmware:ace:*:*:*:*:*:*:*:*

Версия от 2.0 (включая) до 2.0.3 (включая)

cpe:2.3:a:vmware:esx_server:3.0:*:*:*:*:*:*:*

cpe:2.3:a:vmware:esx_server:3.5:*:*:*:*:*:*:*

cpe:2.3:a:vmware:esxi:3.5:*:*:*:*:*:*:*

cpe:2.3:a:vmware:fusion:*:*:*:*:*:*:*:*

Версия до 1.1.1 (включая)

cpe:2.3:a:vmware:player:*:*:*:*:*:*:*:*

Версия от 1.0.0 (включая) до 1.0.6 (включая)

cpe:2.3:a:vmware:player:*:*:*:*:*:*:*:*

Версия от 2.0 (включая) до 2.0.3 (включая)

cpe:2.3:a:vmware:server:*:*:*:*:*:*:*:*

Версия до 1.0.5 (включая)

cpe:2.3:a:vmware:workstation:*:*:*:*:*:*:*:*

Версия от 5.5 (включая) до 5.5.6 (включая)

cpe:2.3:a:vmware:workstation:*:*:*:*:*:*:*:*

Версия от 6.0 (включая) до 6.0.3 (включая)

cpe:2.3:o:vmware:esx:2.5.4:*:*:*:*:*:*:*

cpe:2.3:o:vmware:esx:2.5.5:*:*:*:*:*:*:*

cpe:2.3:o:vmware:esx:3.0.0:*:*:*:*:*:*:*

cpe:2.3:o:vmware:esx:3.0.1:*:*:*:*:*:*:*

cpe:2.3:o:vmware:esx:3.0.2:*:*:*:*:*:*:*

cpe:2.3:o:vmware:esx:3.5:*:*:*:*:*:*:*

EPSS

Процентиль: 36%

0.00153

Низкий

7.2 High

CVSS2

Дефекты

CWE-119

Связанные уязвимости

CVE-2008-2100

ubuntu

больше 17 лет назад

CVE-2008-2100

debian

больше 17 лет назад

Multiple buffer overflows in VIX API 1.1.x before 1.1.4 build 93057 on ...

GHSA-hqvv-32vg-gx63

github

больше 3 лет назад

EPSS

Процентиль: 36%

0.00153

Низкий

7.2 High

CVSS2

Дефекты

CWE-119