CVE-2008-1363 — Vmware ACE vulnerability

CWE-2643 documents3 sources
Severity
7.2HIGHNVD
EPSS
0.0%
top 86.76%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
Vmware ACEVmware PlayerVmware Server+1 more
Timeline
PublishedMar 20
Latest updateMay 1

Description

VMware Workstation 6.0.x before 6.0.3 and 5.5.x before 5.5.6, VMware Player 2.0.x before 2.0.3 and 1.0.x before 1.0.6, VMware ACE 2.0.x before 2.0.1 and 1.0.x before 1.0.5, and VMware Server 1.0.x before 1.0.5 on Windows allow local users to gain privileges via an unspecified manipulation of a config.ini file located in an Application Data folder, which can be used for "hijacking the VMX process."

CVSS vector

AV:L/AC:L/C:C/I:C/A:CExploitability: 3.9 | Impact: 10.0

Affected Packages4 packages

▶NVDvmware/player1.0.0 — 1.0.6+1
▶NVDvmware/server1.0 — 1.0.5
▶NVDvmware/workstation5.5 — 5.5.6+1
▶NVDvmware/ace1.0 — 1.0.5+1

Patches

Patch: www.securityfocus.com ↗Patch: www.vmware.com ↗Patch: www.vmware.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-4wjp-9865-3fjp: VMware Workstation 6↗2022-05-01
▶
CVEList
CVE-2008-1363: VMware Workstation 6↗2008-03-20
▶
CVE-2008-1363 — Vmware ACE vulnerability | cvebase