CVE-2008-4915: Undefined Security Weakness

The CPU hardware emulation in VMware Workstation 6.0.5 and earlier and 5.5.8 and earlier; Player 2.0.x through 2.0.5 and 1.0.x through 1.0.8; ACE 2.0.x through 2.0.5 and earlier, and 1.0.x through 1.0.7; Server 1.0.x through 1.0.7; ESX 2.5.4 through 3.5; and ESXi 3.5, when running 32-bit and 64-b...

CVE-2008-4279: Undefined Security Weakness

The CPU hardware emulation for 64-bit guest operating systems in VMware Workstation 6.0.x before 6.0.5 build 109488 and 5.x before 5.5.8 build 108000; Player 2.0.x before 2.0.5 build 109488 and 1.x before 1.0.8; Server 1.x before 1.0.7 build 108231; and ESX 2.5.4 through 3.5 allows authenticated...

VMware Tools Local Privilege Escalation Vulnerability (VMSA-2008-0009) - Windows

VMWare products are prone to a local privilege escalation vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

VMCI/HGFS VmWare Code Execution Vulnerability (Windows)

The host is installed with VMWare products that are vulnerable to arbitrary code execution. OpenVAS Vulnerability Test $Id: gbvmwareprdtsmultvulnwin.nasl 6518 2017-07-04 13:49:06Z cfischer $ VMCI/HGFS VmWare Code Execution Vulnerability Windows Authors: Chandan S Copyright: Copyright c 2008...

VMCI/HGFS VmWare Code Execution Vulnerability (Linux)

The host is installed with VMWare products that are vulnerable to arbitrary code execution vulnerability. OpenVAS Vulnerability Test $Id: gbvmwareprdtsmultvulnlin.nasl 6539 2017-07-05 12:02:14Z cfischer $ HGFS VmWare Code Execution Vulnerability Linux Authors: Chandan S Copyright: Copyright c 200...

VMCI/HGFS VmWare Code Execution Vulnerability (VMSA-2008-0008) - Linux

VMWare products are prone to an arbitrary code execution vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200711-23 (vmware-workstation vmware-player)

The remote host is missing updates announced in advisory GLSA 200711-23. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-3698: Undefined Security Weakness

Unspecified vulnerability in the OpenProcess function in VMware Workstation 5.5.x before 5.5.8 build 108000, VMware Workstation 6.0.x before 6.0.5 build 109488, VMware Player 1.x before 1.0.8 build 108000, VMware Player 2.x before 2.0.5 build 109488, VMware ACE 1.x before 1.0.7 build 108880, VMwa...

CVE-2008-3694: Undefined Security Weakness

Unspecified vulnerability in a certain ActiveX control in VMware Workstation 5.5.x before 5.5.8 build 108000, VMware Workstation 6.0.x before 6.0.5 build 109488, VMware Player 1.x before 1.0.8 build 108000, VMware Player 2.x before 2.0.5 build 109488, VMware ACE 1.x before 1.0.7 build 108880,...

CVE-2008-3692: Undefined Security Weakness

Unspecified vulnerability in a certain ActiveX control in VMware Workstation 5.5.x before 5.5.8 build 108000, VMware Workstation 6.0.x before 6.0.5 build 109488, VMware Player 1.x before 1.0.8 build 108000, VMware Player 2.x before 2.0.5 build 109488, VMware ACE 1.x before 1.0.7 build 108880,...

CVE-2008-3892: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in a certain ActiveX control in the COM API in VMware Workstation 5.5.x before 5.5.8 build 108000, VMware Workstation 6.0.x before 6.0.5 build 109488, VMware Player 1.x before 1.0.8 build 108000, VMware Player 2.x before 2.0.5 build 109488, VMware ACE 1.x before 1.0.7 build 108880...

CVE-2008-3696: Undefined Security Weakness

Unspecified vulnerability in a certain ActiveX control in VMware Workstation 5.5.x before 5.5.8 build 108000, VMware Workstation 6.0.x before 6.0.5 build 109488, VMware Player 1.x before 1.0.8 build 108000, VMware Player 2.x before 2.0.5 build 109488, VMware ACE 1.x before 1.0.7 build 108880,...

CVE-2008-3695: Undefined Security Weakness

Unspecified vulnerability in a certain ActiveX control in VMware Workstation 5.5.x before 5.5.8 build 108000, VMware Workstation 6.0.x before 6.0.5 build 109488, VMware Player 1.x before 1.0.8 build 108000, VMware Player 2.x before 2.0.5 build 109488, VMware ACE 1.x before 1.0.7 build 108880,...

CVE-2008-3691: Undefined Security Weakness

Unspecified vulnerability in a certain ActiveX control in VMware Workstation 5.5.x before 5.5.8 build 108000, VMware Workstation 6.0.x before 6.0.5 build 109488, VMware Player 1.x before 1.0.8 build 108000, VMware Player 2.x before 2.0.5 build 109488, VMware ACE 1.x before 1.0.7 build 108880,...

CVE-2008-3693: Undefined Security Weakness

Unspecified vulnerability in a certain ActiveX control in VMware Workstation 5.5.x before 5.5.8 build 108000, VMware Workstation 6.0.x before 6.0.5 build 109488, VMware Player 1.x before 1.0.8 build 108000, VMware Player 2.x before 2.0.5 build 109488, VMware ACE 1.x before 1.0.7 build 108880,...

VMSA-2008-0014 Updates to VMware Workstation, VMware Player, VMware ACE, VMware Server, VMware ESX address information disclosure, privilege escalation and other security issues.

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 - ------------------------------------------------------------------------ VMware Security Advisory Advisory ID: VMSA-2008-0014 Synopsis: Updates to VMware Workstation, VMware Player, VMware ACE, VMware Server, VMware ESX address information...

VMware OpenProcess本地特权提升漏洞

BUGTRAQ ID:30936 CVE ID：CVE-2008-3698 CNCVE ID：CNCVE-20083698 VMWare是一款虚拟PC软件，允许在一台机器上同时运行两个或多个Windows、DOS、LINUX系统。 VMware OpenProces存在特权提升问题，本地攻击者可以利用漏洞在宿主系统上执行任意代码。 目前没有详细漏洞细节提供。 VMWare Workstation 5.5.8 build 108000 VMWare Workstation 5.5.8 VMWare Server 1.0.7 build 108231 VMWare Server 1.0.7...

VMware存在多个安全漏洞

BUGTRAQ ID:30934 CVE ID：CVE-2008-3691 CVE-2008-3692 CVE-2008-3693 CVE-2008-3694 CVE-2008-3695 CVE-2008-3696 CNCVE ID：CNCVE-20083691 CNCVE-20083692 CNCVE-20083693 CNCVE-20083694 CNCVE-20083695 CNCVE-20083696 VMWare是一款虚拟PC软件，允许在一台机器上同时运行两个或多个Windows、DOS、LINUX系统。 多个VMWare...

CVE-2008-3761: Improper Input Validation

hcmon.sys in VMware Workstation 6.5.1 and earlier, VMware Player 2.5.1 and earlier, VMware ACE 2.5.1 and earlier, and VMware Server 1.0.x before 1.0.9 build 156507 and 2.0.x before 2.0.1 build 156745 uses the METHODNEITHER communication method for IOCTLs, which allows local users to cause a denia...

VMware Workstation 'hcmon.sys'本地拒绝服务漏洞

BUGTRAQ ID: 30737 CNCAN ID：CNCAN-2008081904 VMWare Workstation是一款流行的虚拟机应用程序。 VMWare Workstation不正确初始化指针，本地攻击者可以利用漏洞对系统进行拒绝服务攻击。 文件：hcmon.sys .text:00011606 loc11606: .text:00011606 mov eax, ebp+SystemBuffer .text:00011609 mov ebp+SystemBuffer2, eax .text:0001160C mov ecx, ebp+SystemBuffer2...