CVE-2008-1392

Published: Mar 20, 2008Modified: Apr 23, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

The default configuration of VMware Workstation 6.0.2, VMware Player 2.0.x before 2.0.3, and VMware ACE 2.0.x before 2.0.1 makes the console of the guest OS accessible through anonymous VIX API calls, which has unknown impact and attack vectors.

Affected (3)

Products: Vmware: Ace, Player, Vmware Workstation

3 products

Configuration A

3 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Vmware Ace	Up to 2.0
Vmware Player	Up to 2.0.2
Vmware Vmware Workstation	Version 6.0.2

Running on/with	Platform Versions
Microsoft Windows	All versions

Related CWEs

CWE-16

References (20)

http://lists.vmware.com/pipermail/security-announce/2008/000008.html

Source: cve@mitre.org

http://security.gentoo.org/glsa/glsa-201209-25.xml

Source: cve@mitre.org

http://securityreason.com/securityalert/3755

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/489739/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/28276

Source: cve@mitre.org

http://www.vmware.com/security/advisories/VMSA-2008-0005.html

Source: cve@mitre.org

PatchVendor Advisory

http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html

Source: cve@mitre.org

PatchVendor Advisory

http://www.vmware.com/support/player2/doc/releasenotes_player2.html

Source: cve@mitre.org

PatchVendor Advisory

http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/41551

Source: cve@mitre.org

http://lists.vmware.com/pipermail/security-announce/2008/000008.html