CVE-2008-1392

published 2008-03-20

CVE-2008-1392: The default configuration of VMware Workstation 6.0.2, VMware Player 2.0.x before 2.0.3, and VMware ACE 2.0.x before 2.0.1 makes the console of the guest OS…

Priority P3 36 critical 10 CVSS 2.0

AV N AC L Au N C C I C A C

The default configuration of VMware Workstation 6.0.2, VMware Player 2.0.x before 2.0.3, and VMware ACE 2.0.x before 2.0.1 makes the console of the guest OS accessible through anonymous VIX API calls, which has unknown impact and attack vectors.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
vmware	ace	<= 2.0	—
vmware	player	<= 2.0.2	—
vmware	vmware_workstation	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-16