Lucene search

MitreCVE-2008-3695

HistorySep 03, 2008 - 2:12 p.m.

CVE-2008-3695

2008-09-0314:12:00

mitre

web.nvd.nist.gov

cve-2008-3695

vmware

workstation

player

ace

server

activex

control

vulnerability

remote attack

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.5

Confidence

High

EPSS

0.009

Percentile

83.1%

JSON

Unspecified vulnerability in a certain ActiveX control in VMware Workstation 5.5.x before 5.5.8 build 108000, VMware Workstation 6.0.x before 6.0.5 build 109488, VMware Player 1.x before 1.0.8 build 108000, VMware Player 2.x before 2.0.5 build 109488, VMware ACE 1.x before 1.0.7 build 108880, VMware ACE 2.x before 2.0.5 build 109488, and VMware Server before 1.0.7 build 108231 has unknown impact and remote attack vectors, a different vulnerability than CVE-2008-3691, CVE-2008-3692, CVE-2008-3693, CVE-2008-3694, and CVE-2008-3696.

Affected configurations

Nvd

Node

vmwareaceRange1.0–1.0.7

vmwareaceRange2.0–2.0.5

vmwareplayerRange1.0.0–1.0.8

vmwareplayerRange2.0–2.0.5

vmwareserverRange<1.0.7

vmwareworkstationRange5.5–5.5.8

vmwareworkstationRange6.0–6.0.5

VendorProductVersionCPE
vmwareace*cpe:2.3:a:vmware:ace:*:*:*:*:*:*:*:*
vmwareplayer*cpe:2.3:a:vmware:player:*:*:*:*:*:*:*:*
vmwareserver*cpe:2.3:a:vmware:server:*:*:*:*:*:*:*:*
vmwareworkstation*cpe:2.3:a:vmware:workstation:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
vmware	ace	*	cpe:2.3:a:vmware:ace::::::::
vmware	player	*	cpe:2.3:a:vmware:player::::::::
vmware	server	*	cpe:2.3:a:vmware:server::::::::
vmware	workstation	*	cpe:2.3:a:vmware:workstation::::::::

References

lists.grok.org.uk/pipermail/full-disclosure/2008-August/064118.html

secunia.com/advisories/31707

secunia.com/advisories/31708

secunia.com/advisories/31709

secunia.com/advisories/31710

securityreason.com/securityalert/4202

www.securityfocus.com/archive/1/495869/100/0/threaded

www.securityfocus.com/bid/30934

www.securitytracker.com/id?1020791

www.vmware.com/security/advisories/VMSA-2008-0014.html

www.vmware.com/support/ace/doc/releasenotes_ace.html

www.vmware.com/support/ace2/doc/releasenotes_ace2.html

www.vmware.com/support/player/doc/releasenotes_player.html

www.vmware.com/support/player2/doc/releasenotes_player2.html

www.vmware.com/support/server/doc/releasenotes_server.html

www.vmware.com/support/ws55/doc/releasenotes_ws55.html

www.vmware.com/support/ws6/doc/releasenotes_ws6.html

www.vupen.com/english/advisories/2008/2466

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.5

Confidence

High

EPSS

0.009

Percentile

83.1%

JSON

Related for CVE-2008-3695