Unscored severity · published Jun 2, 2008
CVE-2008-2098
Heap-based buffer overflow in the VMware Host Guest File System (HGFS) in VMware Workstation 6 before 6.0.4 build 93057, VMware Player 2 before 2.0.4 build 93057, VMware ACE 2…
–
CVSS
0.5%
EPSS
No
On KEV
Description
Heap-based buffer overflow in the VMware Host Guest File System (HGFS) in VMware Workstation 6 before 6.0.4 build 93057, VMware Player 2 before 2.0.4 build 93057, VMware ACE 2 before 2.0.2 build 93057, and VMware Fusion before 1.1.2 build 87978, when folder sharing is used, allows guest OS users to execute arbitrary code on the host OS via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 40% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
A2
Ace 2 · Vmware
2.0; 2.01 · source: NVD
FU
Fusion · Vmware
1.1; 1.1.1 · source: NVD
VP
Vmware Player 2 · Vmware
2.0; 2.01; 2.02; 2.03 · source: NVD
VW
Vmware Workstation · Vmware
6.0.1; 6.0.2; 6.03 · source: NVD
WO
Workstation · Vmware
6.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-2098
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-2098
Vendor Advisory
http://secunia.com/advisories/30476
security.gentoo.org
http://security.gentoo.org/glsa/glsa-201209-25.xml
www.securityfocus.com
http://www.securityfocus.com/archive/1/492831/100/0/threaded
www.securitytracker.com
http://www.securitytracker.com/id?1020148
www.vmware.com
http://www.vmware.com/security/advisories/VMSA-2008-0008.html
Vendor Advisory
http://www.vupen.com/english/advisories/2008/1707/references
More from Ace 2
–
CVE-2008-2099
Unspecified vulnerability in VMCI in VMware Workstation 6 before 6.0.4 build 93057, VMware Player 2 before 2.0.4 build 93057, and VMware ACE 2 before 2.0.2 build 93057 on Windows…