NetSight
high7.1

CVE-2008-1340

Virtual Machine Communication Interface (VMCI) in VMware Workstation 6.0.x before 6.0.3, VMware Player 2.0.x before 2.0.3, and VMware ACE 2.0.x before 2.0.1 al…

Impact

Virtual Machine Communication Interface (VMCI) in VMware Workstation 6.0.x before 6.0.3, VMware Player 2.0.x before 2.0.3, and VMware ACE 2.0.x before 2.0.1 allows attackers to cause a denial of service (host OS crash) via crafted VMCI calls that trigger "memory exhaustion and memory corruption."

Affected products

VendorProductAffected versions
VmwareAce
Versions 1.0, 2.0
VmwarePlayer
Versions 1.0.2, 1.0.3, 1.0.4, 1.0.5, 2.0, 2.0.1
VmwareServer
Version 1.0.3
VmwareVmware Server
Versions 1.0.2, 1.0.4
VmwareVmware Workstation
Versions 5.5.5, 6.0.1, 6.0.2
VmwareWorkstation
Versions 5.5, 5.5.3_build_34685, 5.5.3_build_42958, 5.5.4, 5.5.4_build_44386, 6.0

Weakness classification

References