CVE-2008-4279: Medium severity vmware player vulnerability
The CPU hardware emulation for 64-bit guest operating systems in VMware Workstation 6.0.x before 6.0.5 build 109488 and 5.x before 5.5.8 build 108000; Player 2.0.x before 2.0.5 build 109488 and 1.x before 1.0.8; Server 1.x before 1.0.7 build 108231; and ESX 2.5.4 through 3.5 allows authenticated guest OS users to gain additional guest OS privileges by triggering an exception that causes the virtual CPU to perform an indirect jump to a non-canonical address.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2008-4279?
CVE-2008-4279 has a high severity rating due to its potential impact on the security of virtual machines.
How do I fix CVE-2008-4279?
To fix CVE-2008-4279, upgrade VMware Workstation to version 6.0.5 or later, VMware Player to version 2.0.5 or later, VMware Server to version 1.0.7 or later, or ESX to a version above 3.5.
Which VMware products are affected by CVE-2008-4279?
CVE-2008-4279 affects VMware Workstation versions before 6.0.5, Player versions before 2.0.5, Server versions before 1.0.7, and ESX versions between 2.5.4 and 3.5.
What type of vulnerability is CVE-2008-4279?
CVE-2008-4279 is a vulnerability related to CPU hardware emulation in virtual machines.
Is authentication required to exploit CVE-2008-4279?
Yes, CVE-2008-4279 requires authenticated access to exploit the vulnerability.