ByteOS Network

NVD Vulnerability Details :

CVE-2008-1363

Modified

Source-cve@mitre.org

Published At-20 Mar, 2008 | 00:44

Updated At-23 Apr, 2026 | 00:35

VMware Workstation 6.0.x before 6.0.3 and 5.5.x before 5.5.6, VMware Player 2.0.x before 2.0.3 and 1.0.x before 1.0.6, VMware ACE 2.0.x before 2.0.1 and 1.0.x before 1.0.5, and VMware Server 1.0.x before 1.0.5 on Windows allow local users to gain privileges via an unspecified manipulation of a config.ini file located in an Application Data folder, which can be used for "hijacking the VMX process."

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	7.2	HIGH	AV:L/AC:L/Au:N/C:C/I:C/A:C

Type: Primary

Version: 2.0

Base score: 7.2

Base severity: HIGH

Vector:

AV:L/AC:L/Au:N/C:C/I:C/A:C

CPE Matches

Microsoft Corporation

>>windows>>*

cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*

VMware (Broadcom Inc.)

>>ace>>Versions from 1.0(inclusive) to 1.0.5(exclusive)

cpe:2.3:a:vmware:ace:*:*:*:*:*:*:*:*

VMware (Broadcom Inc.)

>>ace>>Versions from 2.0(inclusive) to 2.0.1(exclusive)

cpe:2.3:a:vmware:ace:*:*:*:*:*:*:*:*

VMware (Broadcom Inc.)

>>player>>Versions from 1.0.0(inclusive) to 1.0.6(exclusive)

cpe:2.3:a:vmware:player:*:*:*:*:*:*:*:*

VMware (Broadcom Inc.)

>>player>>Versions from 2.0(inclusive) to 2.0.3(exclusive)

cpe:2.3:a:vmware:player:*:*:*:*:*:*:*:*

VMware (Broadcom Inc.)

>>server>>Versions from 1.0(inclusive) to 1.0.5(exclusive)

cpe:2.3:a:vmware:server:*:*:*:*:*:*:*:*

VMware (Broadcom Inc.)

>>workstation>>Versions from 5.5(inclusive) to 5.5.6(exclusive)

cpe:2.3:a:vmware:workstation:*:*:*:*:*:*:*:*

VMware (Broadcom Inc.)

>>workstation>>Versions from 6.0(inclusive) to 6.0.3(exclusive)

cpe:2.3:a:vmware:workstation:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-264	Primary	nvd@nist.gov

CWE ID: CWE-264

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://lists.vmware.com/pipermail/security-announce/2008/000008.html	cve@mitre.org	Vendor Advisory
http://security.gentoo.org/glsa/glsa-201209-25.xml	cve@mitre.org	Third Party Advisory
http://securityreason.com/securityalert/3755	cve@mitre.org	Third Party Advisory
http://securitytracker.com/id?1019622	cve@mitre.org	Third Party Advisory VDB Entry
http://www.securityfocus.com/archive/1/489739/100/0/threaded	cve@mitre.org	Third Party Advisory VDB Entry
http://www.securityfocus.com/bid/28276	cve@mitre.org	Patch Third Party Advisory VDB Entry
http://www.vmware.com/security/advisories/VMSA-2008-0005.html	cve@mitre.org	Patch Vendor Advisory
http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html	cve@mitre.org	Patch Vendor Advisory
http://www.vmware.com/support/player/doc/releasenotes_player.html	cve@mitre.org	Patch Vendor Advisory
http://www.vmware.com/support/player2/doc/releasenotes_player2.html	cve@mitre.org	Patch Vendor Advisory
http://www.vmware.com/support/server/doc/releasenotes_server.html	cve@mitre.org	Patch Vendor Advisory
http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html	cve@mitre.org	Patch Vendor Advisory
http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html	cve@mitre.org	Patch Vendor Advisory
http://www.vupen.com/english/advisories/2008/0905/references	cve@mitre.org	Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/41252	cve@mitre.org	Third Party Advisory VDB Entry
http://lists.vmware.com/pipermail/security-announce/2008/000008.html	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://security.gentoo.org/glsa/glsa-201209-25.xml	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://securityreason.com/securityalert/3755	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://securitytracker.com/id?1019622	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory VDB Entry
http://www.securityfocus.com/archive/1/489739/100/0/threaded	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory VDB Entry
http://www.securityfocus.com/bid/28276	af854a3a-2127-422b-91ae-364da2661108	Patch Third Party Advisory VDB Entry
http://www.vmware.com/security/advisories/VMSA-2008-0005.html	af854a3a-2127-422b-91ae-364da2661108	Patch Vendor Advisory
http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html	af854a3a-2127-422b-91ae-364da2661108	Patch Vendor Advisory
http://www.vmware.com/support/player/doc/releasenotes_player.html	af854a3a-2127-422b-91ae-364da2661108	Patch Vendor Advisory
http://www.vmware.com/support/player2/doc/releasenotes_player2.html	af854a3a-2127-422b-91ae-364da2661108	Patch Vendor Advisory
http://www.vmware.com/support/server/doc/releasenotes_server.html	af854a3a-2127-422b-91ae-364da2661108	Patch Vendor Advisory
http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html	af854a3a-2127-422b-91ae-364da2661108	Patch Vendor Advisory
http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html	af854a3a-2127-422b-91ae-364da2661108	Patch Vendor Advisory
http://www.vupen.com/english/advisories/2008/0905/references	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/41252	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory VDB Entry

Hyperlink: http://lists.vmware.com/pipermail/security-announce/2008/000008.html

Source: cve@mitre.org

Resource:

Vendor Advisory

Hyperlink: http://security.gentoo.org/glsa/glsa-201209-25.xml

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://securityreason.com/securityalert/3755

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://securitytracker.com/id?1019622

Source: cve@mitre.org

Resource:

Third Party Advisory

VDB Entry

Hyperlink: http://www.securityfocus.com/archive/1/489739/100/0/threaded

Source: cve@mitre.org

Resource:

Third Party Advisory

VDB Entry

Hyperlink: http://www.securityfocus.com/bid/28276

Source: cve@mitre.org

Resource:

Patch

Third Party Advisory

VDB Entry

Hyperlink: http://www.vmware.com/security/advisories/VMSA-2008-0005.html

Source: cve@mitre.org

Resource:

Patch

Vendor Advisory

Hyperlink: http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html

Source: cve@mitre.org

Resource:

Patch

Vendor Advisory

Hyperlink: http://www.vmware.com/support/player/doc/releasenotes_player.html

Source: cve@mitre.org

Resource:

Patch

Vendor Advisory

Hyperlink: http://www.vmware.com/support/player2/doc/releasenotes_player2.html

Source: cve@mitre.org

Resource:

Patch

Vendor Advisory

Hyperlink: http://www.vmware.com/support/server/doc/releasenotes_server.html

Source: cve@mitre.org

Resource:

Patch

Vendor Advisory

Hyperlink: http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html

Source: cve@mitre.org

Resource:

Patch

Vendor Advisory

Hyperlink: http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html

Source: cve@mitre.org

Resource:

Patch

Vendor Advisory

Hyperlink: http://www.vupen.com/english/advisories/2008/0905/references

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/41252

Source: cve@mitre.org

Resource:

Third Party Advisory

VDB Entry

Hyperlink: http://lists.vmware.com/pipermail/security-announce/2008/000008.html