VMware Host Guest File System Heap Buffer Overflow Vulnerability
BID:29444
Info
VMware Host Guest File System Heap Buffer Overflow Vulnerability
| Bugtraq ID: | 29444 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2008-2098 |
| Remote: | No |
| Local: | Yes |
| Published: | May 30 2008 12:00AM |
| Updated: | Oct 01 2012 07:01PM |
| Credit: | Andrew Honig of the Department of Defense |
| Vulnerable: |
VMWare Workstation 6.0.4 VMWare Workstation 6.0.3 Build 80004 VMWare Workstation 6.0.3 VMWare Workstation 6.0.2 VMWare Workstation 6.0.1 VMWare Workstation 6.0 VMWare Player 2.0.4 VMWare Player 2.0.3 Build 80004 VMWare Player 2.0.2 VMWare Player 2.0.1 VMWare Player 2.0 VMWare Fusion 1.1.2 VMWare Fusion 1.1.1 VMWare Fusion 1.1 VMWare Fusion 1.0 VMWare ACE 2.0.2 VMWare ACE 2.0.1 VMWare ACE 2.0 Gentoo Linux |
| Not Vulnerable: |
VMWare Workstation 6.0.4 build 93057 VMWare Player 2.0.4 build 93057 VMWare Fusion 1.1.2 build 87978 VMWare ACE 2.0.2 build 93057 |
Discussion
VMware Host Guest File System Heap Buffer Overflow Vulnerability
The VMware Host Guest File System (HGFS) is prone to a prone to a heap-based buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data.
An attacker can exploit this issue to execute arbitrary code within the context of the 'vmx' process on the host computer. Failed exploit attempts will result in a denial-of-service condition.
This issue affects the following products:
VMware Workstation 6 prior to 6.0.4 build 93057 for Microsoft Windows and Linux
VMware Player 2 prior to 2.0.4 build 93057 for Microsoft Windows and Linux
VMware ACE 2 prior to 2.0.2 build 93057 for Microsoft Windows
VMware Fusion 1 prior to 1.1.2 build 87978 for Mac OS X
The VMware Host Guest File System (HGFS) is prone to a prone to a heap-based buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data.
An attacker can exploit this issue to execute arbitrary code within the context of the 'vmx' process on the host computer. Failed exploit attempts will result in a denial-of-service condition.
This issue affects the following products:
VMware Workstation 6 prior to 6.0.4 build 93057 for Microsoft Windows and Linux
VMware Player 2 prior to 2.0.4 build 93057 for Microsoft Windows and Linux
VMware ACE 2 prior to 2.0.2 build 93057 for Microsoft Windows
VMware Fusion 1 prior to 1.1.2 build 87978 for Mac OS X
Exploit / POC
VMware Host Guest File System Heap Buffer Overflow Vulnerability
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
VMware Host Guest File System Heap Buffer Overflow Vulnerability
Solution:
The vendor has released an update. Please see the references for more information.
Solution:
The vendor has released an update. Please see the references for more information.
References
VMware Host Guest File System Heap Buffer Overflow Vulnerability
References:
References:
- VMware Homepage (VMware)