ByteOS Network

NVD Vulnerability Details :

CVE-2008-3892

Modified

Source-cve@mitre.org

Published At-03 Sep, 2008 | 14:12

Updated At-23 Apr, 2026 | 00:35

Buffer overflow in a certain ActiveX control in the COM API in VMware Workstation 5.5.x before 5.5.8 build 108000, VMware Workstation 6.0.x before 6.0.5 build 109488, VMware Player 1.x before 1.0.8 build 108000, VMware Player 2.x before 2.0.5 build 109488, VMware ACE 1.x before 1.0.7 build 108880, VMware ACE 2.x before 2.0.5 build 109488, and VMware Server before 1.0.7 build 108231 allows remote attackers to cause a denial of service (browser crash) or possibly execute arbitrary code via a call to the GuestInfo method in which there is a long string argument, and an assignment of a long string value to the result of this call. NOTE: this may overlap CVE-2008-3691, CVE-2008-3692, CVE-2008-3693, CVE-2008-3694, CVE-2008-3695, or CVE-2008-3696.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	10.0	HIGH	AV:N/AC:L/Au:N/C:C/I:C/A:C

Type: Primary

Version: 2.0

Base score: 10.0

Base severity: HIGH

Vector:

AV:N/AC:L/Au:N/C:C/I:C/A:C

CPE Matches

VMware (Broadcom Inc.)

>>ace>>Versions from 1.0(inclusive) to 1.0.7(exclusive)

cpe:2.3:a:vmware:ace:*:*:*:*:*:*:*:*

VMware (Broadcom Inc.)

>>ace>>Versions from 2.0(inclusive) to 2.0.5(exclusive)

cpe:2.3:a:vmware:ace:*:*:*:*:*:*:*:*

VMware (Broadcom Inc.)

>>player>>Versions from 1.0.0(inclusive) to 1.0.8(exclusive)

cpe:2.3:a:vmware:player:*:*:*:*:*:*:*:*

VMware (Broadcom Inc.)

>>player>>Versions from 2.0(inclusive) to 2.0.5(exclusive)

cpe:2.3:a:vmware:player:*:*:*:*:*:*:*:*

VMware (Broadcom Inc.)

>>server>>Versions before 1.0.7(exclusive)

cpe:2.3:a:vmware:server:*:*:*:*:*:*:*:*

VMware (Broadcom Inc.)

>>workstation>>Versions from 5.5(inclusive) to 5.5.8(exclusive)

cpe:2.3:a:vmware:workstation:*:*:*:*:*:*:*:*

VMware (Broadcom Inc.)

>>workstation>>Versions from 6.0(inclusive) to 6.0.5(exclusive)

cpe:2.3:a:vmware:workstation:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-119	Primary	nvd@nist.gov

CWE ID: CWE-119

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/064118.html	cve@mitre.org	Third Party Advisory
http://secunia.com/advisories/31707	cve@mitre.org	Patch Third Party Advisory
http://secunia.com/advisories/31708	cve@mitre.org	Patch Third Party Advisory
http://secunia.com/advisories/31709	cve@mitre.org	Patch Third Party Advisory
http://secunia.com/advisories/31710	cve@mitre.org	Patch Third Party Advisory
http://securityreason.com/securityalert/4202	cve@mitre.org	Third Party Advisory
http://www.securityfocus.com/archive/1/495869/100/0/threaded	cve@mitre.org	Third Party Advisory VDB Entry
http://www.securityfocus.com/bid/29503	cve@mitre.org	Third Party Advisory VDB Entry
http://www.securityfocus.com/bid/30934	cve@mitre.org	Third Party Advisory VDB Entry
http://www.vmware.com/support/ace/doc/releasenotes_ace.html	cve@mitre.org	Vendor Advisory
http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html	cve@mitre.org	Vendor Advisory
http://www.vmware.com/support/player/doc/releasenotes_player.html	cve@mitre.org	Vendor Advisory
http://www.vmware.com/support/player2/doc/releasenotes_player2.html	cve@mitre.org	Vendor Advisory
http://www.vmware.com/support/server/doc/releasenotes_server.html	cve@mitre.org	Vendor Advisory
http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html	cve@mitre.org	Vendor Advisory
http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html	cve@mitre.org	Vendor Advisory
http://www.vupen.com/english/advisories/2008/2466	cve@mitre.org	Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/43062	cve@mitre.org	VDB Entry
https://www.exploit-db.com/exploits/6345	cve@mitre.org	Third Party Advisory VDB Entry
http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/064118.html	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://secunia.com/advisories/31707	af854a3a-2127-422b-91ae-364da2661108	Patch Third Party Advisory
http://secunia.com/advisories/31708	af854a3a-2127-422b-91ae-364da2661108	Patch Third Party Advisory
http://secunia.com/advisories/31709	af854a3a-2127-422b-91ae-364da2661108	Patch Third Party Advisory
http://secunia.com/advisories/31710	af854a3a-2127-422b-91ae-364da2661108	Patch Third Party Advisory
http://securityreason.com/securityalert/4202	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://www.securityfocus.com/archive/1/495869/100/0/threaded	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory VDB Entry
http://www.securityfocus.com/bid/29503	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory VDB Entry
http://www.securityfocus.com/bid/30934	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory VDB Entry
http://www.vmware.com/support/ace/doc/releasenotes_ace.html	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://www.vmware.com/support/player/doc/releasenotes_player.html	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://www.vmware.com/support/player2/doc/releasenotes_player2.html	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://www.vmware.com/support/server/doc/releasenotes_server.html	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://www.vupen.com/english/advisories/2008/2466	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/43062	af854a3a-2127-422b-91ae-364da2661108	VDB Entry
https://www.exploit-db.com/exploits/6345	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory VDB Entry

Hyperlink: http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/064118.html

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://secunia.com/advisories/31707

Source: cve@mitre.org

Resource:

Patch

Third Party Advisory

Hyperlink: http://secunia.com/advisories/31708

Source: cve@mitre.org

Resource:

Patch

Third Party Advisory

Hyperlink: http://secunia.com/advisories/31709

Source: cve@mitre.org

Resource:

Patch

Third Party Advisory

Hyperlink: http://secunia.com/advisories/31710

Source: cve@mitre.org

Resource:

Patch

Third Party Advisory

Hyperlink: http://securityreason.com/securityalert/4202

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://www.securityfocus.com/archive/1/495869/100/0/threaded

Source: cve@mitre.org

Resource:

Third Party Advisory

VDB Entry

Hyperlink: http://www.securityfocus.com/bid/29503

Source: cve@mitre.org

Resource:

Third Party Advisory

VDB Entry

Hyperlink: http://www.securityfocus.com/bid/30934

Source: cve@mitre.org

Resource:

Third Party Advisory

VDB Entry

Hyperlink: http://www.vmware.com/support/ace/doc/releasenotes_ace.html

Source: cve@mitre.org

Resource:

Vendor Advisory

Hyperlink: http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html

Source: cve@mitre.org

Resource:

Vendor Advisory

Hyperlink: http://www.vmware.com/support/player/doc/releasenotes_player.html

Source: cve@mitre.org

Resource:

Vendor Advisory

Hyperlink: http://www.vmware.com/support/player2/doc/releasenotes_player2.html

Source: cve@mitre.org

Resource:

Vendor Advisory

Hyperlink: http://www.vmware.com/support/server/doc/releasenotes_server.html

Source: cve@mitre.org

Resource:

Vendor Advisory

Hyperlink: http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html

Source: cve@mitre.org

Resource:

Vendor Advisory

Hyperlink: http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html

Source: cve@mitre.org

Resource:

Vendor Advisory

Hyperlink: http://www.vupen.com/english/advisories/2008/2466

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/43062

Source: cve@mitre.org

Resource:

VDB Entry

Hyperlink: https://www.exploit-db.com/exploits/6345

Source: cve@mitre.org

Resource:

Third Party Advisory

VDB Entry

Hyperlink: http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/064118.html