CVE-2008-2100
Summary
| CVE | CVE-2008-2100 |
|---|---|
| State | PUBLISHED |
| Assigner | mitre |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2008-06-05 20:32:00 UTC |
| Updated | 2026-04-23 00:35:47 UTC |
| Description | Multiple buffer overflows in VIX API 1.1.x before 1.1.4 build 93057 on VMware Workstation 5.x and 6.x, VMware Player 1.x and 2.x, VMware ACE 2.x, VMware Server 1.x, VMware Fusion 1.x, VMware ESXi 3.5, and VMware ESX 3.0.1 through 3.5 allow guest OS users to execute arbitrary code on the host OS via unspecified vectors. |
Risk And Classification
Primary CVSS: v2.0 7.2 from [email protected]
AV:L/AC:L/Au:N/C:C/I:C/A:C
Problem Types: CWE-119 | NVD-CWE-noinfo | n/a
CVSS v2.0 Breakdown
Access Vector
LocalAccess Complexity
LowAuthentication
NoneConfidentiality
CompleteIntegrity
CompleteAvailability
CompleteAV:L/AC:L/Au:N/C:C/I:C/A:C
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Vmware | Ace | All | All | All | All |
| Application | Vmware | Ace | All | All | All | All |
| Operating System | Vmware | Esx | 2.5.4 | All | All | All |
| Operating System | Vmware | Esx | 2.5.5 | All | All | All |
| Operating System | Vmware | Esx | 3.0.0 | All | All | All |
| Operating System | Vmware | Esx | 3.0.1 | All | All | All |
| Operating System | Vmware | Esx | 3.0.2 | All | All | All |
| Operating System | Vmware | Esx | 3.5 | All | All | All |
| Application | Vmware | Esxi | 3.5 | All | All | All |
| Application | Vmware | Esx Server | 3.0 | All | All | All |
| Application | Vmware | Esx Server | 3.5 | All | All | All |
| Application | Vmware | Fusion | All | All | All | All |
| Application | Vmware | Player | All | All | All | All |
| Application | Vmware | Player | All | All | All | All |
| Application | Vmware | Server | All | All | All | All |
| Application | Vmware | Workstation | All | All | All | All |
| Application | Vmware | Workstation | All | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| VMware Products Multiple Vulnerabilities - Advisories - Secunia | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | Third Party Advisory |
| SecurityFocus | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | Third Party Advisory, VDB Entry |
| VMware Buffer Overflows in VIX API Let Local Users Execute Arbitrary Code - SecurityTracker | af854a3a-2127-422b-91ae-364da2661108 | securitytracker.com | Third Party Advisory, VDB Entry |
| Repository / Oval Repository | af854a3a-2127-422b-91ae-364da2661108 | oval.cisecurity.org | Third Party Advisory |
| Webmail : Solution de messagerie professionnelle - OVHcloud- OVH | af854a3a-2127-422b-91ae-364da2661108 | www.vupen.com | Permissions Required |
| SecurityReason - Updates to VMware Workstation, VMware Player, VMware ACE, VMware Fusion, VMware Server, VMware VIX API, VMware ESX, VMware ESXi | af854a3a-2127-422b-91ae-364da2661108 | securityreason.com | Third Party Advisory |
| IBM X-Force Exchange | af854a3a-2127-422b-91ae-364da2661108 | exchange.xforce.ibmcloud.com | Third Party Advisory, VDB Entry |
| Gentoo Linux Documentation -- VMware Player, Server, Workstation: Multiple vulnerabilities | af854a3a-2127-422b-91ae-364da2661108 | security.gentoo.org | Third Party Advisory |
| VMSA-2008-0009.2 - VMware | af854a3a-2127-422b-91ae-364da2661108 | www.vmware.com | Vendor Advisory |
| VMware VIX API Multiple Unspecified Buffer Overflow Vulnerabilities | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | Third Party Advisory, VDB Entry |
| Repository / Oval Repository | af854a3a-2127-422b-91ae-364da2661108 | oval.cisecurity.org | Third Party Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.