CVE-2008-1340

Severity

71%

Complexity

86%

Confidentiality

115%

Virtual Machine Communication Interface (VMCI) in VMware Workstation 6.0.x before 6.0.3, VMware Player 2.0.x before 2.0.3, and VMware ACE 2.0.x before 2.0.1 allows attackers to cause a denial of service (host OS crash) via crafted VMCI calls that trigger "memory exhaustion and memory corruption."

Virtual Machine Communication Interface (VMCI) in VMware Workstation 6.0.x before 6.0.3, VMware Player 2.0.x before 2.0.3, and VMware ACE 2.0.x before 2.0.1 allows attackers to cause a denial of service (host OS crash) via crafted VMCI calls that trigger "memory exhaustion and memory corruption."

CVSS 2.0 Base Score 7.1. CVSS Attack Vector: network. CVSS Attack Complexity: medium. CVSS Vector: (AV:N/AC:M/Au:N/C:N/I:N/A:C).

Overview

First reported 16 years ago

2008-03-20 00:44:00

Last updated 6 years ago

2018-10-11 20:31:00

Affected Software

VMWare ACE 1.0

1.0

VMWare ACE 2.0

2.0

VMware Player 1.0.2

1.0.2

VMware Player 1.0.3

1.0.3

VMWare Player 1.0.4

1.0.4

VMware Player 1.0.5

1.0.5

VMWare Player 2.0

2.0

VMware Player 2.0.1

2.0.1

VMware Player 2.0.2

2.0.2

VMWare Server 1.0.3

1.0.3

VMWare VMWare 5.5

5.5

VMWare VMWare Workstation 5.5.3 build 34685

5.5.3_build_34685

VMWare VMWare Workstation 5.5.3 build 42958

5.5.3_build_42958

VMWare VMWare 5.5.4

5.5.4

VMWare VMWare Workstation 5.5.4 build 44386

5.5.4_build_44386

VMWare VMWare 6.0

6.0

References

[security-announce] 20080317 VMSA-2008-0005 Updated VMware Workstation, VMware Player, VMware Server, VMware ACE, and VMware Fusion resolve critical security issues

Patch

GLSA-201209-25

3755

1019624

20080318 VMSA-2008-0005 Updated VMware Workstation, VMware Player, VMware Server, VMware ACE, and VMware Fusion resolve critical security issues

28276

Patch

28289

http://www.vmware.com/security/advisories/VMSA-2008-0005.html

Patch

http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html

Patch

http://www.vmware.com/support/player2/doc/releasenotes_player2.html

Patch

http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html

Patch

ADV-2008-0905

vmware-vmci-dos(41250)

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.