Unscored severity · published Aug 21, 2008
CVE-2008-3761
hcmon.sys in VMware Workstation 6.5.1 and earlier, VMware Player 2.5.1 and earlier, VMware ACE 2.5.1 and earlier, and VMware Server 1.0.x before 1.0.9 build 156507 and 2.0.x…
–
CVSS
1%
EPSS
No
On KEV
Description
hcmon.sys in VMware Workstation 6.5.1 and earlier, VMware Player 2.5.1 and earlier, VMware ACE 2.5.1 and earlier, and VMware Server 1.0.x before 1.0.9 build 156507 and 2.0.x before 2.0.1 build 156745 uses the METHOD_NEITHER communication method for IOCTLs, which allows local users to cause a denial of service via a crafted IOCTL request.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 62% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
VW
Vmware Workstation · Vmware
6.0.0.45731 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-3761
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-3761
lists.vmware.com
http://lists.vmware.com/pipermail/security-announce/2009/000054.html
seclists.org
http://seclists.org/fulldisclosure/2009/Apr/0036.html
securityreason.com
http://securityreason.com/securityalert/4177
www.orange-bat.com
http://www.orange-bat.com/adv/2008/adv.08.17.txt
www.securityfocus.com
http://www.securityfocus.com/bid/30737
www.securityfocus.com
http://www.securityfocus.com/bid/34373
More from Vmware Workstation
9.3
CVE-2026-59346
VMware Workstation and Fusion VMXNET3 integer-overflow vulnerability
8.1
CVE-2026-59347
VMware Workstation and Fusion HGFS stack-based buffer-overflow vulnerability
–
CVE-2008-4916
Unspecified vulnerability in a guest virtual device driver in VMware Workstation before 5.5.9 build 126128, and 6.5.1 and earlier 6.x versions; VMware Player before 1.0.9 build…
–
CVE-2009-0177
vmwarebase.dll, as used in the vmware-authd service (aka vmware-authd.exe), in VMware Workstation 6.5.1 build 126130, 6.5.1 and earlier; VMware Player 2.5.1 build 126130, 2.5.1…
–
CVE-2007-5671
HGFS.sys in the VMware Tools package in VMware Workstation 5.x before 5.5.6 build 80404, VMware Player before 1.0.6 build 80404, VMware ACE before 1.0.5 build 79846, VMware Server…