CVE-2008-4917

HighCVSS 7.2/10Last modified Jun 16, 2026

Description

Unspecified vulnerability in VMware Workstation 5.5.8 and earlier, and 6.0.5 and earlier 6.x versions; VMware Player 1.0.8 and earlier, and 2.0.5 and earlier 2.x versions; VMware Server 1.0.9 and earlier; VMware ESXi 3.5; and VMware ESX 3.0.2 through 3.5 allows guest OS users to have an unknown impact by sending the virtual hardware a request that triggers an arbitrary physical-memory write operation, leading to memory corruption.

Metrics

CVSS 2.0 7.2/10AV:L/AC:L/Au:N/C:C/I:C/A:C

Weakness enumeration

CWE-399

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://kb.vmware.com/kb/1006980Patch, Vendor Advisory
http://kb.vmware.com/kb/1006986Vendor Advisory
http://secunia.com/advisories/32965Third Party Advisory
http://security.gentoo.org/glsa/glsa-201209-25.xmlThird Party Advisory
http://securitytracker.com/id?1021300Third Party Advisory, VDB Entry
http://securitytracker.com/id?1021301Third Party Advisory, VDB Entry
http://www.securityfocus.com/archive/1/498863/100/0/threadedThird Party Advisory, VDB Entry
http://www.securityfocus.com/archive/1/498886/100/0/threadedThird Party Advisory, VDB Entry
http://www.securityfocus.com/bid/32597Third Party Advisory, VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6246Third Party Advisory
http://kb.vmware.com/kb/1006980Patch, Vendor Advisory
http://kb.vmware.com/kb/1006986Vendor Advisory
http://secunia.com/advisories/32965Third Party Advisory
http://security.gentoo.org/glsa/glsa-201209-25.xmlThird Party Advisory
http://securitytracker.com/id?1021300Third Party Advisory, VDB Entry
http://securitytracker.com/id?1021301Third Party Advisory, VDB Entry
http://www.securityfocus.com/archive/1/498863/100/0/threadedThird Party Advisory, VDB Entry
http://www.securityfocus.com/archive/1/498886/100/0/threadedThird Party Advisory, VDB Entry
http://www.securityfocus.com/bid/32597Third Party Advisory, VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6246Third Party Advisory

Timeline

Published: Dec 9, 2008
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2008

CVE-2008-49184.3Cross-site scripting (XSS) vulnerability in SonicWALL SonicOS Enhanced before 4.0.1.1, as used in SonicWALL Pro 2040 and TZ 180 and 190, all CVE-2008-49198.8Insecure method vulnerability in VISAGESOFT eXPert PDF Viewer X ActiveX control (VSPDFViewerX.ocx) 3.0.990.0 allows remote attackers to over CVE-2008-49217.5board/admin/reguser.php in Chipmunk CMS 1.3 allows remote attackers to bypass authentication and gain administrator privileges via a direct CVE-2008-49229.3Buffer overflow in the DjVu ActiveX Control 3.0 for Microsoft Office (DjVu_ActiveX_MSOffice.dll) allows remote attackers to execute arbitrar CVE-2008-49239.0Multiple insecure method vulnerabilities in MW6 Technologies Aztec ActiveX control (AZTECLib.MW6Aztec, Aztec.dll) 3.0.0.1 allow remote attac CVE-2008-49249.0Multiple insecure method vulnerabilities in MW6 Technologies 1D Barcode ActiveX control (BARCODELib.MW6Barcode, Barcode.dll) 3.0.0.1 allow r CVE-2008-49259.0Multiple insecure method vulnerabilities in MW6 Technologies DataMatrix ActiveX control (DATAMATRIXLib.MW6DataMatrix, DataMatrix.dll) 3.0.0.CVE-2008-49269.0Multiple insecure method vulnerabilities in MW6 Technologies PDF417 ActiveX control (MW6PDF417Lib.PDF417, MW6PDF417.dll) 3.0.0.1 allow remot CVE-2008-49274.3Microsoft Windows Media Player (WMP) 9.0 through 11 allows user-assisted attackers to cause a denial of service (application crash) via a ma CVE-2008-49284.3Cross-site scripting (XSS) vulnerability in the redirect function in functions.php in MyBB (aka MyBulletinBoard) 1.4.2 allows remote attacke CVE-2008-49297.5MyBB (aka MyBulletinBoard) 1.4.2 uses insufficient randomness to compose filenames of uploaded files used as attachments, which makes it eas CVE-2008-49305.0MyBB (aka MyBulletinBoard) 1.4.2 does not properly handle an uploaded file with a nonstandard file type that contains HTML sequences, which