CVE-2008-2099: Buffer Overflow

Published Jun 2, 2008

Updated

Unspecified vulnerability in VMCI in VMware Workstation 6 before 6.0.4 build 93057, VMware Player 2 before 2.0.4 build 93057, and VMware ACE 2 before 2.0.2 build 93057 on Windows allows guest OS users to execute arbitrary code on the host OS via unspecified vectors.

Affected Software

11 affected components

Microsoft Windows

VMware ACE 2=2.0

VMware ACE 2=2.0.1

VMware VMware Player 2=2.0

VMware VMware Player 2=2.0.1

VMware VMware Player 2=2.0.2

VMware VMware Player 2=2.0.3

VMware VMware Workstation=6.0.1

VMware VMware Workstation=6.0.2

VMware VMware Workstation=6.0.3

VMware Workstation=6.0

Remediation

Patch Available

http://www.vmware.com/security/advisories/VMSA-2008-0008.html

Event History

Jun 2, 2008

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

Description

Data Sourced

09:30 PM

DescriptionWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2008-2099?

The severity of CVE-2008-2099 is rated as critical due to its potential to allow guest OS users to execute arbitrary code on the host OS.

How do I fix CVE-2008-2099?

To fix CVE-2008-2099, users should upgrade to VMware Workstation 6.0.4 or later, VMware Player 2.0.4 or later, or VMware ACE 2.0.2 or later.

Which VMware products are affected by CVE-2008-2099?

CVE-2008-2099 affects VMware Workstation 6.0.x versions before 6.0.4, VMware Player 2.0.x versions before 2.0.4, and VMware ACE 2.0.x versions before 2.0.2.

What types of attacks can exploit CVE-2008-2099?

CVE-2008-2099 can be exploited by malicious guest OS users to execute arbitrary code on the host operating system.

Is there a workaround for CVE-2008-2099?

There are no specific workarounds listed for CVE-2008-2099 other than applying the recommended updates.