CVE-2008-1392

VMware Workstation <6.0.2, Player <2.0.3, ACE <2.0.1 - Info Disclosure

Title source: llm
STIX 2.1

Description

The default configuration of VMware Workstation 6.0.2, VMware Player 2.0.x before 2.0.3, and VMware ACE 2.0.x before 2.0.1 makes the console of the guest OS accessible through anonymous VIX API calls, which has unknown impact and attack vectors.

References (10)

Core 10
Core References
Third Party Advisory vendor-advisory x_refsource_gentoo
http://security.gentoo.org/glsa/glsa-201209-25.xml
Third Party Advisory third-party-advisory x_refsource_sreason
http://securityreason.com/securityalert/3755
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/41551
Patch, Vendor Advisory x_refsource_confirm
http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html
Patch, Vendor Advisory x_refsource_confirm
http://www.vmware.com/support/player2/doc/releasenotes_player2.html
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/489739/100/0/threaded
Various Sources mailing-list x_refsource_mlist
http://lists.vmware.com/pipermail/security-announce/2008/000008.html
Patch, Vendor Advisory x_refsource_confirm
http://www.vmware.com/security/advisories/VMSA-2008-0005.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/28276

Scores

EPSS 0.0086
EPSS Percentile 75.2%

Details

CWE
CWE-16
Status published
Products (3)
vmware/ace < 2.0
vmware/player < 2.0.2
vmware/vmware_workstation 6.0.2
Published Mar 20, 2008
Tracked Since Feb 18, 2026