{"api_version":"1","generated_at":"2026-07-23T06:05:00+00:00","cve":"CVE-2008-3698","urls":{"html":"https://cve.report/CVE-2008-3698","api":"https://cve.report/api/cve/CVE-2008-3698.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2008-3698","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2008-3698"},"summary":{"title":"CVE-2008-3698","description":"Unspecified vulnerability in the OpenProcess function in VMware Workstation 5.5.x before 5.5.8 build 108000, VMware Workstation 6.0.x before 6.0.5 build 109488, VMware Player 1.x before 1.0.8 build 108000, VMware Player 2.x before 2.0.5 build 109488, VMware ACE 1.x before 1.0.7 build 108880, VMware ACE 2.x before 2.0.5 build 109488, and VMware Server before 1.0.7 build 108231 on Windows allows local host OS users to gain privileges on the host OS via unknown vectors.","state":"PUBLISHED","assigner":"mitre","published_at":"2008-09-03 14:12:00","updated_at":"2026-04-23 00:35:47"},"problem_types":["CWE-264","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"7.2","severity":"","vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","data":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","baseScore":7.2,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"}}],"references":[{"url":"http://securitytracker.com/id?1020790","name":"http://securitytracker.com/id?1020790","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"title":"VMware Workstation/ACE/Player/Server OpenProcess Bug Lets Local Users Gain Elevated Privileges - SecurityTracker","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vmware.com/support/player/doc/releasenotes_player.html","name":"http://www.vmware.com/support/player/doc/releasenotes_player.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"VMware Player Release Notes","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/archive/1/495869/100/0/threaded","name":"http://www.securityfocus.com/archive/1/495869/100/0/threaded","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vmware.com/support/server/doc/releasenotes_server.html","name":"http://www.vmware.com/support/server/doc/releasenotes_server.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"VMware Server Release Notes","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/30936","name":"http://www.securityfocus.com/bid/30936","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"title":"VMware OpenProcess Local Privilege Escalation Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://securityreason.com/securityalert/4202","name":"http://securityreason.com/securityalert/4202","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"SecurityReason - VMware * address information disclosure, privilege escalation and other security issues.","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html","name":"http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"VMware ACE Release Notes","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html","name":"http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"VMware Workstation 6 Release Notes","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2008/2466","name":"http://www.vupen.com/english/advisories/2008/2466","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0014.html","name":"http://www.vmware.com/security/advisories/VMSA-2008-0014.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"VMSA-2008-0014.3 - VMware","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vmware.com/support/player2/doc/releasenotes_player2.html","name":"http://www.vmware.com/support/player2/doc/releasenotes_player2.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"VMware Player Release Notes","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html","name":"http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"VMware Workstation 5.5 Release Notes","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/31707","name":"http://secunia.com/advisories/31707","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"],"title":"VMware Workstation Multiple Vulnerabilities - Secunia Advisories - Vulnerability Intelligence - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44795","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44795","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["VDB Entry"],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/064118.html","name":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/064118.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"[Full-disclosure] VMSA-2008-0014 Updates to VMware Workstation, VMware Player, VMware ACE, VMware Server, VMware ESX address information disclosure, privilege escalation and other security issues.","mime":"text/html","httpstatus":"404","archivestatus":"200"},{"url":"http://www.vmware.com/support/ace/doc/releasenotes_ace.html","name":"http://www.vmware.com/support/ace/doc/releasenotes_ace.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"VMware ACE Release Notes","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-3698","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-3698","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2008","cve_id":"3698","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"vmware","cpe5":"ace","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T09:45:19.068Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.vmware.com/security/advisories/VMSA-2008-0014.html"},{"name":"30936","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/30936"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.vmware.com/support/server/doc/releasenotes_server.html"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html"},{"name":"vmware-openprocess-privilege-escalation(44795)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44795"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.vmware.com/support/player2/doc/releasenotes_player2.html"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.vmware.com/support/ace/doc/releasenotes_ace.html"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.vmware.com/support/player/doc/releasenotes_player.html"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html"},{"name":"20080830 VMSA-2008-0014 Updates to VMware Workstation, VMware Player, VMware ACE, VMware Server, VMware ESX address information disclosure, privilege escalation and other security issues.","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://www.securityfocus.com/archive/1/495869/100/0/threaded"},{"name":"20080830 VMSA-2008-0014 Updates to VMware Workstation, VMware Player, VMware ACE, VMware Server, VMware ESX address information disclosure, privilege escalation and other security issues.","tags":["mailing-list","x_refsource_FULLDISC","x_transferred"],"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/064118.html"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html"},{"name":"1020790","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://securitytracker.com/id?1020790"},{"name":"31707","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/31707"},{"name":"4202","tags":["third-party-advisory","x_refsource_SREASON","x_transferred"],"url":"http://securityreason.com/securityalert/4202"},{"name":"ADV-2008-2466","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2008/2466"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2008-08-30T00:00:00.000Z","descriptions":[{"lang":"en","value":"Unspecified vulnerability in the OpenProcess function in VMware Workstation 5.5.x before 5.5.8 build 108000, VMware Workstation 6.0.x before 6.0.5 build 109488, VMware Player 1.x before 1.0.8 build 108000, VMware Player 2.x before 2.0.5 build 109488, VMware ACE 1.x before 1.0.7 build 108880, VMware ACE 2.x before 2.0.5 build 109488, and VMware Server before 1.0.7 build 108231 on Windows allows local host OS users to gain privileges on the host OS via unknown vectors."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2018-10-11T19:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"tags":["x_refsource_CONFIRM"],"url":"http://www.vmware.com/security/advisories/VMSA-2008-0014.html"},{"name":"30936","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/30936"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.vmware.com/support/server/doc/releasenotes_server.html"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html"},{"name":"vmware-openprocess-privilege-escalation(44795)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44795"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.vmware.com/support/player2/doc/releasenotes_player2.html"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.vmware.com/support/ace/doc/releasenotes_ace.html"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.vmware.com/support/player/doc/releasenotes_player.html"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html"},{"name":"20080830 VMSA-2008-0014 Updates to VMware Workstation, VMware Player, VMware ACE, VMware Server, VMware ESX address information disclosure, privilege escalation and other security issues.","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://www.securityfocus.com/archive/1/495869/100/0/threaded"},{"name":"20080830 VMSA-2008-0014 Updates to VMware Workstation, VMware Player, VMware ACE, VMware Server, VMware ESX address information disclosure, privilege escalation and other security issues.","tags":["mailing-list","x_refsource_FULLDISC"],"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/064118.html"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html"},{"name":"1020790","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://securitytracker.com/id?1020790"},{"name":"31707","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/31707"},{"name":"4202","tags":["third-party-advisory","x_refsource_SREASON"],"url":"http://securityreason.com/securityalert/4202"},{"name":"ADV-2008-2466","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2008/2466"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2008-3698","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Unspecified vulnerability in the OpenProcess function in VMware Workstation 5.5.x before 5.5.8 build 108000, VMware Workstation 6.0.x before 6.0.5 build 109488, VMware Player 1.x before 1.0.8 build 108000, VMware Player 2.x before 2.0.5 build 109488, VMware ACE 1.x before 1.0.7 build 108880, VMware ACE 2.x before 2.0.5 build 109488, and VMware Server before 1.0.7 build 108231 on Windows allows local host OS users to gain privileges on the host OS via unknown vectors."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"http://www.vmware.com/security/advisories/VMSA-2008-0014.html","refsource":"CONFIRM","url":"http://www.vmware.com/security/advisories/VMSA-2008-0014.html"},{"name":"30936","refsource":"BID","url":"http://www.securityfocus.com/bid/30936"},{"name":"http://www.vmware.com/support/server/doc/releasenotes_server.html","refsource":"CONFIRM","url":"http://www.vmware.com/support/server/doc/releasenotes_server.html"},{"name":"http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html","refsource":"CONFIRM","url":"http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html"},{"name":"vmware-openprocess-privilege-escalation(44795)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44795"},{"name":"http://www.vmware.com/support/player2/doc/releasenotes_player2.html","refsource":"CONFIRM","url":"http://www.vmware.com/support/player2/doc/releasenotes_player2.html"},{"name":"http://www.vmware.com/support/ace/doc/releasenotes_ace.html","refsource":"CONFIRM","url":"http://www.vmware.com/support/ace/doc/releasenotes_ace.html"},{"name":"http://www.vmware.com/support/player/doc/releasenotes_player.html","refsource":"CONFIRM","url":"http://www.vmware.com/support/player/doc/releasenotes_player.html"},{"name":"http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html","refsource":"CONFIRM","url":"http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html"},{"name":"20080830 VMSA-2008-0014 Updates to VMware Workstation, VMware Player, VMware ACE, VMware Server, VMware ESX address information disclosure, privilege escalation and other security issues.","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/495869/100/0/threaded"},{"name":"20080830 VMSA-2008-0014 Updates to VMware Workstation, VMware Player, VMware ACE, VMware Server, VMware ESX address information disclosure, privilege escalation and other security issues.","refsource":"FULLDISC","url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/064118.html"},{"name":"http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html","refsource":"CONFIRM","url":"http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html"},{"name":"1020790","refsource":"SECTRACK","url":"http://securitytracker.com/id?1020790"},{"name":"31707","refsource":"SECUNIA","url":"http://secunia.com/advisories/31707"},{"name":"4202","refsource":"SREASON","url":"http://securityreason.com/securityalert/4202"},{"name":"ADV-2008-2466","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2008/2466"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2008-3698","datePublished":"2008-09-03T14:00:00.000Z","dateReserved":"2008-08-14T00:00:00.000Z","dateUpdated":"2024-08-07T09:45:19.068Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2008-09-03 14:12:00","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["CWE-264","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","baseScore":7.2,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0","versionEndExcluding":"1.0.7","matchCriteriaId":"799650A4-BD6F-40EF-889B-6ED50E05CCA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:ace:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0","versionEndExcluding":"2.0.5","matchCriteriaId":"E196532F-3B8D-4DAB-9DBA-FE204D3A07A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndExcluding":"1.0.8","matchCriteriaId":"B553A95A-C3D3-4A01-80D6-2F656BA26BF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:player:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0","versionEndExcluding":"2.0.5","matchCriteriaId":"F8CD1D7B-2D6F-4D48-8276-5C3285FF7B3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:server:*:*:*:*:*:*:*:*","versionEndExcluding":"1.0.7","matchCriteriaId":"F1BF4289-F9A3-49B8-9641-9F7B0A02F3E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:*:*:*:*:*:*:*:*","versionStartIncluding":"5.5","versionEndExcluding":"5.5.8","matchCriteriaId":"6A47F4F7-B457-4F5B-B719-7A5741595456"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0","versionEndExcluding":"6.0.5","matchCriteriaId":"F2B69FA6-E75A-4EDB-BD6C-41B560AABBC0"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2008","CveId":"3698","Ordinal":"1","Title":"CVE-2008-3698","CVE":"CVE-2008-3698","Year":"2008"},"notes":[{"CveYear":"2008","CveId":"3698","Ordinal":"1","NoteData":"Unspecified vulnerability in the OpenProcess function in VMware Workstation 5.5.x before 5.5.8 build 108000, VMware Workstation 6.0.x before 6.0.5 build 109488, VMware Player 1.x before 1.0.8 build 108000, VMware Player 2.x before 2.0.5 build 109488, VMware ACE 1.x before 1.0.7 build 108880, VMware ACE 2.x before 2.0.5 build 109488, and VMware Server before 1.0.7 build 108231 on Windows allows local host OS users to gain privileges on the host OS via unknown vectors.","Type":"Description","Title":"CVE-2008-3698"},{"CveYear":"2008","CveId":"3698","Ordinal":"2","NoteData":"2008-09-03","Type":"Other","Title":"Published"},{"CveYear":"2008","CveId":"3698","Ordinal":"3","NoteData":"2018-10-11","Type":"Other","Title":"Modified"}]}}}