NVD

Id
4704  
Name
CVE-2008-4915  
Description
The CPU hardware emulation in VMware Workstation 6.0.5 and earlier and 5.5.8 and earlier; Player 2.0.x through 2.0.5 and 1.0.x through 1.0.8; ACE 2.0.x through 2.0.5 and earlier, and 1.0.x through 1.0.7; Server 1.0.x through 1.0.7; ESX 2.5.4 through 3.5; and ESXi 3.5, when running 32-bit and 64-bit guest operating systems, does not properly handle the Trap flag, which allows authenticated guest OS users to gain privileges on the guest OS.  
Reject
 
CVSS Version
2  
CVSS Score
6.9  
Severity
Medium  
CVSS Base Score
6.9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-11-10  
Modified Date
2013-05-14  
Seq
2008-4915  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
29409 4704 CVE-2008-4915 [Security-announce] 20081106 VMSA-2008-0018 VMware Hosted products and patches for ESX and ESXi resolve two security issues  View
29410 4704 CVE-2008-4915 oval:org.mitre.oval:def:6309  View
29411 4704 CVE-2008-4915 GLSA-201209-25  View
29412 4704 CVE-2008-4915 20081107 VMSA-2008-0018 VMware Hosted products and patches for ESX and ESXi resolve two security issues  View
29413 4704 CVE-2008-4915 32168  View
29414 4704 CVE-2008-4915 1021154  View
29415 4704 CVE-2008-4915 http://www.vmware.com/security/advisories/VMSA-2008-0018.html  View
29416 4704 CVE-2008-4915 ADV-2008-3052  View
29417 4704 CVE-2008-4915 vmware-cpuhardware-priv-escalation(46415)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
47017 JVNDB-2008-002327 VMWare Workstation、VMWare Player、VMWare ACE、VMWare Server、VMWare ESX Server および VMWare ESXi Server の CPU ハードウェアエミュレーションにおける権限昇格の脆弱性 VMWare Workstation、VMWare Player、VMWare ACE、VMWare Server、VMWare ESX Server および VMWare ESXi Server の CPU ハードウェアエミュレーションには、32 ビットおよび 64 ビットのゲスト OS が稼動している場合、トラップフラグを適切に扱わないことに起因する権限昇格の脆弱性が存在します。 CVE-2008-4915 35028 CVE-2008-4915 4704 6.9 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002327.html 2008-11-10 2009-07-08 View