CVE-2008-1392
Published Mar 20, 2008
Last updated 6 years ago
Overview
- Description
- The default configuration of VMware Workstation 6.0.2, VMware Player 2.0.x before 2.0.3, and VMware ACE 2.0.x before 2.0.1 makes the console of the guest OS accessible through anonymous VIX API calls, which has unknown impact and attack vectors.
- Source
- cve@mitre.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 10
- Impact score
- 10
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
- nvd@nist.gov
- CWE-16
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:vmware:ace:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A9191386-10C0-48A2-B70C-6A047347B5A1",
"versionEndIncluding": "2.0"
},
{
"criteria": "cpe:2.3:a:vmware:player:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "389DA24B-6865-428D-8630-837A0D589891",
"versionEndIncluding": "2.0.2"
},
{
"criteria": "cpe:2.3:a:vmware:vmware_workstation:6.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6DFFE01E-BD0A-432E-B47C-D68DAADDD075"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
]