vulnwire
10.0crit

CVE-2008-3892in critical feed1 exploit

Buffer overflow in a certain ActiveX control in the COM API in VMware Workstation 5.5.x before 5.5.8 build 108000, VMware Workstation 6.0.x…

Published 18 y ago · modified 4 mo ago · JSON

CVSS
10.0
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
24.4%
percentile 98%
Public exploits
1
Exploit-DB

Buffer overflow in a certain ActiveX control in the COM API in VMware Workstation 5.5.x before 5.5.8 build 108000, VMware Workstation 6.0.x before 6.0.5 build 109488, VMware Player 1.x before 1.0.8 build 108000, VMware Player 2.x before 2.0.5 build 109488, VMware ACE 1.x before 1.0.7 build 108880, VMware ACE 2.x before 2.0.5 build 109488, and VMware Server before 1.0.7 build 108231 allows remote attackers to cause a denial of service (browser crash) or possibly execute arbitrary code via a call to the GuestInfo method in which there is a long string argument, and an assignment of a long string value to the result of this call. NOTE: this may overlap CVE-2008-3691, CVE-2008-3692, CVE-2008-3693, CVE-2008-3694, CVE-2008-3695, or CVE-2008-3696.

Exploit prediction (EPSS)

24.36% probability of exploitation in the next 30 days, higher than 98% of all scored CVEs.

Exploits and detections

  • EDB-6345 VMware - COM API ActiveX Remote Buffer Overflow (PoC) · dos · 2008-09-01

CVSS scores

Assigned byVersionScoreVector
NVD2.010.0AV:N/AC:L/Au:N/C:C/I:C/A:C

Classification

Weakness
  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
Technology feeds
VMware (RSS, critical only)

References

  • vmware.com /support/server/doc/releasenotes_server.html · x_refsource_MISC, x_transferred
  • exploit-db.com /exploits/6345 · exploit, x_refsource_EXPLOIT-DB, x_transferred
  • vmware.com /support/ace/doc/releasenotes_ace.html · x_refsource_MISC, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/43062 · vdb-entry, x_refsource_XF, x_transferred
  • secunia.com /advisories/31709 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • vmware.com /support/ws6/doc/releasenotes_ws6.html · x_refsource_MISC, x_transferred
  • vmware.com /support/ws55/doc/releasenotes_ws55.html · x_refsource_MISC, x_transferred
  • secunia.com /advisories/31710 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • securityfocus.com /bid/30934 · vdb-entry, x_refsource_BID, x_transferred
  • vmware.com /support/player2/doc/releasenotes_player2.html · x_refsource_MISC, x_transferred
  • securityfocus.com /archive/1/495869/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • vmware.com /support/ace2/doc/releasenotes_ace2.html · x_refsource_MISC, x_transferred
  • lists.grok.org.uk /pipermail/full-disclosure/2008-August/064118.html · mailing-list, x_refsource_FULLDISC, x_transferred
  • secunia.com /advisories/31707 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/31708 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • securityfocus.com /bid/29503 · vdb-entry, x_refsource_BID, x_transferred
  • vmware.com /support/player/doc/releasenotes_player.html · x_refsource_MISC, x_transferred
  • securityreason.com /securityalert/4202 · third-party-advisory, x_refsource_SREASON, x_transferred
  • vupen.com /english/advisories/2008/2466 · vdb-entry, x_refsource_VUPEN, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.