NVD

Id
4115  
Name
CVE-2008-4279  
Description
The CPU hardware emulation for 64-bit guest operating systems in VMware Workstation 6.0.x before 6.0.5 build 109488 and 5.x before 5.5.8 build 108000; Player 2.0.x before 2.0.5 build 109488 and 1.x before 1.0.8; Server 1.x before 1.0.7 build 108231; and ESX 2.5.4 through 3.5 allows authenticated guest OS users to gain additional guest OS privileges by triggering an exception that causes the virtual CPU to perform an indirect jump to a non-canonical address.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.1  
CVSS Vector
(AV:L/AC:L/Au:S/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-10-06  
Modified Date
2011-03-07  
Seq
2008-4279  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
26229 4115 CVE-2008-4279 20081004 VMware Emulation Flaw x64 Guest Privilege Escalation (1/2)  View
26230 4115 CVE-2008-4279 20081004 VMSA-2008-0016 VMware Hosted products, VirtualCenter Update 3 and  View
26231 4115 CVE-2008-4279 oval:org.mitre.oval:def:5929  View
26232 4115 CVE-2008-4279 20081004 VMSA-2008-0016 VMware Hosted products, VirtualCenter Update 3 and patches for ESX and ESXi resolve multiple security issues  View
26233 4115 CVE-2008-4279 31569  View
26234 4115 CVE-2008-4279 1020991  View
26235 4115 CVE-2008-4279 http://www.vmware.com/security/advisories/VMSA-2008-0016.html  View
26236 4115 CVE-2008-4279 ADV-2008-2740  View
26237 4115 CVE-2008-4279 vmware-esxesxi-jump-privilege-escalation(45668)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
47144 JVNDB-2008-002454 複数の VMware 製品の CPU ハードウェアエミュレーションにおける権限を取得される脆弱性 複数の VMware 製品の 64bit ゲスト OS 用 CPU ハードウェアエミュレーションには、仮想 CPU に non-canonical アドレスへの間接的ジャンプを実行させる例外処理を誘発し、追加ゲスト OS の権限を取得される脆弱性が存在します。 CVE-2008-4279 34392 CVE-2008-4279 4115 6.8 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002454.html 2008-10-03 2010-09-13 View