Vulnerability Description
The default configuration of VMware Workstation 6.0.2, VMware Player 2.0.x before 2.0.3, and VMware ACE 2.0.x before 2.0.1 makes the console of the guest OS accessible through anonymous VIX API calls, which has unknown impact and attack vectors.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | Windows | All versions |
| Vmware | Ace | <= 2.0 |
| Vmware | Player | <= 2.0.2 |
| Vmware | Vmware Workstation | 6.0.2 |
Related Weaknesses (CWE)
References
- http://lists.vmware.com/pipermail/security-announce/2008/000008.html
- http://security.gentoo.org/glsa/glsa-201209-25.xml
- http://securityreason.com/securityalert/3755
- http://www.securityfocus.com/archive/1/489739/100/0/threaded
- http://www.securityfocus.com/bid/28276
- http://www.vmware.com/security/advisories/VMSA-2008-0005.htmlPatchVendor Advisory
- http://www.vmware.com/support/ace2/doc/releasenotes_ace2.htmlPatchVendor Advisory
- http://www.vmware.com/support/player2/doc/releasenotes_player2.htmlPatchVendor Advisory
- http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41551
- http://lists.vmware.com/pipermail/security-announce/2008/000008.html
- http://security.gentoo.org/glsa/glsa-201209-25.xml
- http://securityreason.com/securityalert/3755
- http://www.securityfocus.com/archive/1/489739/100/0/threaded
- http://www.securityfocus.com/bid/28276
FAQ
What is CVE-2008-1392?
CVE-2008-1392 is a vulnerability with a CVSS score of 10.0 (HIGH). The default configuration of VMware Workstation 6.0.2, VMware Player 2.0.x before 2.0.3, and VMware ACE 2.0.x before 2.0.1 makes the console of the guest OS accessible through anonymous VIX API calls,...
How severe is CVE-2008-1392?
CVE-2008-1392 has been rated HIGH with a CVSS base score of 10.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2008-1392?
Check the references section above for vendor advisories and patch information. Affected products include: Microsoft Windows, Vmware Ace, Vmware Player, Vmware Vmware Workstation.