NetSight
IP …
medium6.9

CVE-2008-4915

The CPU hardware emulation in VMware Workstation 6.0.5 and earlier and 5.5.8 and earlier; Player 2.0.x through 2.0.5 and 1.0.x through 1.0.8; ACE 2.0.x through…

Impact

The CPU hardware emulation in VMware Workstation 6.0.5 and earlier and 5.5.8 and earlier; Player 2.0.x through 2.0.5 and 1.0.x through 1.0.8; ACE 2.0.x through 2.0.5 and earlier, and 1.0.x through 1.0.7; Server 1.0.x through 1.0.7; ESX 2.5.4 through 3.5; and ESXi 3.5, when running 32-bit and 64-bit guest operating systems, does not properly handle the Trap flag, which allows authenticated guest OS users to gain privileges on the guest OS.

Affected products

VendorProductAffected versions
VmwareAce
from 1.0 through 1.0.7
from 2.0 through 2.0.5
VmwareEsx
from 2.5.4 through 3.5
VmwareEsxi
Version 3.5
VmwarePlayer
from 1.0.0 through 1.0.8
from 2.0 through 2.0.5
VmwareServer
from 1.0 through 1.0.7
VmwareWorkstation
from 5.5 through 5.5.8
from 6.0 through 6.0.5

Weakness classification

CWE-264

References