CVE-2008-4916

Medium

Description

Unspecified vulnerability in a guest virtual device driver in VMware Workstation before 5.5.9 build 126128, and 6.5.1 and earlier 6.x versions; VMware Player before 1.0.9 build 126128, and 2.5.1 and earlier 2.x versions; VMware ACE before 1.0.8 build 125922, and 2.5.1 and earlier 2.x versions; VMware Server 1.x before 1.0.8 build 126538 and 2.0.x before 2.0.1 build 156745; VMware Fusion before 2.0.1; VMware ESXi 3.5; and VMware ESX 3.0.2, 3.0.3, and 3.5 allows guest OS users to cause a denial of service (host OS crash) via unknown vectors.

SeverityMedium
CVSS4.6
Exploit probability—
ProductEmc Vmware Player
PublishedApr 6, 2009
First seenApr 6, 2009

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
emc vmware_playerNo range specified—
vmware vmware_ace1.0, 1.0.2, 1.0.3, 1.0.4, 1.0.5, 1.0.7, 1.0.8, 2.0.1, 2.0.2, 2.0.3, 2.0.5, 2.5, 2.5.1—
vmware vmware_esx3.0.2, 3.0.3, 3.5—
vmware vmware_esxi3.5—
vmware vmware_player1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.0.5, 1.0.6, 1.0.7, 1.0.8, 1.0.9, 1.01, 1.05, 2.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, 2.5, 2.5.1—
vmware vmware_server1.0, 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.0.5, 1.0.6, 1.0.7, 1.05, 2.0—
vmware vmware_workstation4.5.3, 5.0, 5.5.0, 5.5.1, 5.5.2, 5.5.3, 5.5.4, 5.5.5, 5.5.6, 5.5.7, 5.5.8, 6.0, 6.0.0.45731, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5, 6.03, 6.5, 6.5.1—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.