CVE-2008-1362

CWE-2643 documents3 sources
Severity
7.2HIGH
EPSS
0.0%
top 89.69%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
6
Vmware ACEVmware PlayerVmware Server+3 more
Timeline
PublishedMar 20
Latest updateMay 1

Description

VMware Workstation 6.0.x before 6.0.3 and 5.5.x before 5.5.6, VMware Player 2.0.x before 2.0.3 and 1.0.x before 1.0.6, VMware ACE 2.0.x before 2.0.1 and 1.0.x before 1.0.5, and VMware Server 1.0.x before 1.0.5 on Windows allow local users to gain privileges or cause a denial of service by impersonating the authd process through an unspecified use of an "insecurely created named pipe," a different vulnerability than CVE-2008-1361.

CVSS vector

AV:L/AC:L/C:C/I:C/A:CExploitability: 3.9 | Impact: 10.0

Affected Packages6 packages

▶NVDvmware/player7 versions+6
▶NVDvmware/server1.0.3
▶NVDvmware/workstation6 versions+5
▶NVDvmware/vmware_server1.0.2, 1.0.4+1
▶NVDvmware/vmware_workstation5.5.5, 6.0.1, 6.0.2+2

Patches

Patch: lists.vmware.com ↗Patch: www.vmware.com ↗Patch: www.vmware.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-3wg9-7hfj-6cp9: VMware Workstation 6↗2022-05-01
▶
CVEList
CVE-2008-1362: VMware Workstation 6↗2008-03-20
▶
CVE-2008-1362 (HIGH CVSS 7.2) | VMware Workstation 6.0.x before 6.0 | cvebase.io