CVE

Id
31480  
CVE No.
CVE-2008-1363  
Status
Candidate  
Description
VMware Workstation 6.0.x before 6.0.3 and 5.5.x before 5.5.6, VMware Player 2.0.x before 2.0.3 and 1.0.x before 1.0.6, VMware ACE 2.0.x before 2.0.1 and 1.0.x before 1.0.5, and VMware Server 1.0.x before 1.0.5 on Windows allow local users to gain privileges via an unspecified manipulation of a config.ini file located in an Application Data folder, which can be used for "hijacking the VMX process."  
Phase
Assigned (20080317)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
337140 31480 CVE-2008-1363 BUGTRAQ:20080318 VMSA-2008-0005 Updated VMware Workstation, VMware Player, VMware Server, VMware ACE, and VMware Fusion resolve critical security issues  View
337141 31480 CVE-2008-1363 URL:http://www.securityfocus.com/archive/1/archive/1/489739/100/0/threaded  View
337142 31480 CVE-2008-1363 MLIST:[security-announce] 20080317 VMSA-2008-0005 Updated VMware Workstation, VMware Player, VMware Server, VMware ACE, and VMware Fusion resolve critical security issues  View
337143 31480 CVE-2008-1363 URL:http://lists.vmware.com/pipermail/security-announce/2008/000008.html  View
337144 31480 CVE-2008-1363 CONFIRM:http://www.vmware.com/security/advisories/VMSA-2008-0005.html  View
337145 31480 CVE-2008-1363 CONFIRM:http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html  View
337146 31480 CVE-2008-1363 CONFIRM:http://www.vmware.com/support/player/doc/releasenotes_player.html  View
337147 31480 CVE-2008-1363 CONFIRM:http://www.vmware.com/support/player2/doc/releasenotes_player2.html  View
337148 31480 CVE-2008-1363 CONFIRM:http://www.vmware.com/support/server/doc/releasenotes_server.html  View
337149 31480 CVE-2008-1363 CONFIRM:http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html  View
337150 31480 CVE-2008-1363 CONFIRM:http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html  View
337151 31480 CVE-2008-1363 GENTOO:GLSA-201209-25  View
337152 31480 CVE-2008-1363 URL:http://security.gentoo.org/glsa/glsa-201209-25.xml  View
337153 31480 CVE-2008-1363 BID:28276  View
337154 31480 CVE-2008-1363 URL:http://www.securityfocus.com/bid/28276  View
337155 31480 CVE-2008-1363 VUPEN:ADV-2008-0905  View
337156 31480 CVE-2008-1363 URL:http://www.vupen.com/english/advisories/2008/0905/references  View
337157 31480 CVE-2008-1363 SECTRACK:1019622  View
337158 31480 CVE-2008-1363 URL:http://securitytracker.com/id?1019622  View
337159 31480 CVE-2008-1363 SREASON:3755  View
337160 31480 CVE-2008-1363 URL:http://securityreason.com/securityalert/3755  View
337161 31480 CVE-2008-1363 XF:vmware-config-privilege-escalation(41252)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
46033 JVNDB-2008-001343 gcc における cld 命令を生成しないことによるメモリ破壊の脆弱性 gcc には x86 システムや i386 システム上において、memcpy() 関数や memmove() 関数のような文字列操作のためのコンパイル処理を行う際、ABI 規約の違反によるダイレクションフラグ (DF) のリセットを妨害されることによって、cld 命令を生成されないため、Linux カーネルによるシグナルハンドリングを行う際に誤ってダイレクションにデータがコピーされるメモリ破壊の脆弱性が存在します。 CVE-2008-1367 31480 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001343.html  View