CVE-2008-2098

2008-06-0221:30:00

CWE-119

[email protected]

web.nvd.nist.gov

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

AI Score

Confidence

High

EPSS

0.001

Percentile

42.8%

JSON

Heap-based buffer overflow in the VMware Host Guest File System (HGFS) in VMware Workstation 6 before 6.0.4 build 93057, VMware Player 2 before 2.0.4 build 93057, VMware ACE 2 before 2.0.2 build 93057, and VMware Fusion before 1.1.2 build 87978, when folder sharing is used, allows guest OS users to execute arbitrary code on the host OS via unspecified vectors.

Affected configurations

Nvd

Node

vmwareace_2Match2.0

vmwareace_2Match2.01

vmwarefusionMatch1.1

vmwarefusionMatch1.1.1

vmwarevmware_player_2Match2.0

vmwarevmware_player_2Match2.01

vmwarevmware_player_2Match2.02

vmwarevmware_player_2Match2.03

vmwarevmware_workstationMatch6.0.1

vmwarevmware_workstationMatch6.0.2

vmwarevmware_workstationMatch6.03

vmwareworkstationMatch6.0

VendorProductVersionCPE
vmwareace_22.0cpe:2.3:a:vmware:ace_2:2.0:*:*:*:*:*:*:*
vmwareace_22.01cpe:2.3:a:vmware:ace_2:2.01:*:*:*:*:*:*:*
vmwarefusion1.1cpe:2.3:a:vmware:fusion:1.1:*:*:*:*:*:*:*
vmwarefusion1.1.1cpe:2.3:a:vmware:fusion:1.1.1:*:*:*:*:*:*:*
vmwarevmware_player_22.0cpe:2.3:a:vmware:vmware_player_2:2.0:*:*:*:*:*:*:*
vmwarevmware_player_22.01cpe:2.3:a:vmware:vmware_player_2:2.01:*:*:*:*:*:*:*
vmwarevmware_player_22.02cpe:2.3:a:vmware:vmware_player_2:2.02:*:*:*:*:*:*:*
vmwarevmware_player_22.03cpe:2.3:a:vmware:vmware_player_2:2.03:*:*:*:*:*:*:*
vmwarevmware_workstation6.0.1cpe:2.3:a:vmware:vmware_workstation:6.0.1:*:*:*:*:*:*:*
vmwarevmware_workstation6.0.2cpe:2.3:a:vmware:vmware_workstation:6.0.2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
vmware	ace_2	2.0	cpe:2.3:a:vmware:ace_2:2.0:::::::*
vmware	ace_2	2.01	cpe:2.3:a:vmware:ace_2:2.01:::::::*
vmware	fusion	1.1	cpe:2.3:a:vmware:fusion:1.1:::::::*
vmware	fusion	1.1.1	cpe:2.3:a:vmware:fusion:1.1.1:::::::*
vmware	vmware_player_2	2.0	cpe:2.3:a:vmware:vmware_player_2:2.0:::::::*
vmware	vmware_player_2	2.01	cpe:2.3:a:vmware:vmware_player_2:2.01:::::::*
vmware	vmware_player_2	2.02	cpe:2.3:a:vmware:vmware_player_2:2.02:::::::*
vmware	vmware_player_2	2.03	cpe:2.3:a:vmware:vmware_player_2:2.03:::::::*
vmware	vmware_workstation	6.0.1	cpe:2.3:a:vmware:vmware_workstation:6.0.1:::::::*
vmware	vmware_workstation	6.0.2	cpe:2.3:a:vmware:vmware_workstation:6.0.2:::::::*