Vulnerability CVE-2008-4916 - CERT Civis.Net

Vulnerability Name:

CVE-2008-4916 (CCN-49699)

Assigned:

2008-11-03

Published:

2009-04-03

Updated:

2017-09-29

Summary:

Unspecified vulnerability in a guest virtual device driver in VMware Workstation before 5.5.9 build 126128, and 6.5.1 and earlier 6.x versions; VMware Player before 1.0.9 build 126128, and 2.5.1 and earlier 2.x versions; VMware ACE before 1.0.8 build 125922, and 2.5.1 and earlier 2.x versions; VMware Server 1.x before 1.0.8 build 126538 and 2.0.x before 2.0.1 build 156745; VMware Fusion before 2.0.1; VMware ESXi 3.5; and VMware ESX 3.0.2, 3.0.3, and 3.5 allows guest OS users to cause a denial of service (host OS crash) via unknown vectors.

CVSS v3 Severity:

4.0 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)

Exploitability Metrics:	Attack Vector (AV): Local Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Low

CVSS v2 Severity:

4.6 Medium (CVSS v2 Vector: AV:L/AC:L/Au:S/C:N/I:N/A:C)
3.4 Low (Temporal CVSS v2 Vector: AV:L/AC:L/Au:S/C:N/I:N/A:C/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Local Access Complexity (AC): Low Authentication (Au): Single_Instance
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Complete

2.1 Low (CCN CVSS v2 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P)
1.6 Low (CCN Temporal CVSS v2 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Local Access Complexity (AC): Low Athentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Partial

Vulnerability Type:

Vulnerability Consequences:

Denial of Service

References:

Source: MITRE
Type: CNA
CVE-2008-4916

Source: MLIST
Type: UNKNOWN
[security-announce] 20090403 VMSA-2009-0005 VMware Hosted products, VI Client and patches for ESX and ESXi resolve multiple security issues

Source: FULLDISC
Type: UNKNOWN
20090403 VMSA-2009-0005 VMware Hosted products, VI Client and patches for ESX and ESXi resolve multiple security issues

Source: GENTOO
Type: UNKNOWN
GLSA-201209-25

Source: CCN
Type: SECTRACK ID: 1021973
VMware Guest Virtual Device Driver Bug Lets Local Users Deny Service

Source: CCN
Type: OSVDB ID: 53634
VMware Multiple Products Display Function Host OS Arbitrary Code Execution

Source: CCN
Type: OSVDB ID: 53694
VMware Multiple Products Guest Virtual Device Driver Unspecified DoS

Source: BID
Type: UNKNOWN
34373

Source: CCN
Type: BID-34373
VMware Hosted Products VMSA-2009-0005 Multiple Remote Vulnerabilities

Source: SECTRACK
Type: UNKNOWN
1021973

Source: CCN
Type: VMSA-2009-0005
VMware Hosted products, VI Client and patches for ESX and ESXi resolve multiple security issues

Source: CONFIRM
Type: UNKNOWN
http://www.vmware.com/security/advisories/VMSA-2009-0005.html

Source: VUPEN
Type: UNKNOWN
ADV-2009-0944

Source: XF
Type: UNKNOWN
vmware-virtual-device-dos(49699)

Source: OVAL
Type: UNKNOWN
oval:org.mitre.oval:def:6439

Vulnerable Configuration:

Configuration 1:

cpe:/a:emc:vmware_player:*:*:*:*:*:*:*:*

OR cpe:/a:vmware:vmware_ace:1.0:*:*:*:*:*:*:*

OR cpe:/a:vmware:vmware_ace:1.0.2:*:*:*:*:*:*:*

OR cpe:/a:vmware:vmware_ace:1.0.3:*:*:*:*:*:*:*

OR cpe:/a:vmware:vmware_ace:1.0.4:*:*:*:*:*:*:*

OR cpe:/a:vmware:vmware_ace:1.0.5:*:*:*:*:*:*:*

OR cpe:/a:vmware:vmware_ace:1.0.7:*:*:*:*:*:*:*

OR cpe:/a:vmware:vmware_ace:1.0.8:*:*:*:*:*:*:*

OR cpe:/a:vmware:vmware_ace:2.0.1:*:*:*:*:*:*:*

OR cpe:/a:vmware:vmware_ace:2.0.2:*:*:*:*:*:*:*

OR cpe:/a:vmware:vmware_ace:2.0.3:*:*:*:*:*:*:*

OR cpe:/a:vmware:vmware_ace:2.0.5:*:*:*:*:*:*:*

OR cpe:/a:vmware:vmware_ace:2.5:*:*:*:*:*:*:*

OR cpe:/a:vmware:vmware_ace:2.5.1:*:*:*:*:*:*:*

OR cpe:/a:vmware:vmware_esx:3.0.2:*:*:*:*:*:*:*

OR cpe:/a:vmware:vmware_esx:3.0.3:*:*:*:*:*:*:*

OR cpe:/a:vmware:vmware_esx:3.5:*:*:*:*:*:*:*

OR cpe:/a:vmware:vmware_esxi:3.5:*:*:*:*:*:*:*

OR cpe:/a:vmware:vmware_player:1.0.0:*:*:*:*:*:*:*

OR cpe:/a:vmware:vmware_player:1.0.1:*:*:*:*:*:*:*

OR cpe:/a:vmware:vmware_player:1.0.2:*:*:*:*:*:*:*

OR cpe:/a:vmware:vmware_player:1.0.3:*:*:*:*:*:*:*

OR cpe:/a:vmware:vmware_player:1.0.4:*:*:*:*:*:*:*

OR cpe:/a:vmware:vmware_player:1.0.5:*:*:*:*:*:*:*

OR cpe:/a:vmware:vmware_player:1.0.6:*:*:*:*:*:*:*

OR cpe:/a:vmware:vmware_player:1.0.7:*:*:*:*:*:*:*

OR cpe:/a:vmware:vmware_player:1.0.8:*:*:*:*:*:*:*

OR cpe:/a:vmware:vmware_player:1.0.9:*:*:*:*:*:*:*

OR cpe:/a:vmware:vmware_player:1.01:*:*:*:*:*:*:*

OR cpe:/a:vmware:vmware_player:1.05:*:*:*:*:*:*:*

OR cpe:/a:vmware:vmware_player:2.0:*:*:*:*:*:*:*

OR cpe:/a:vmware:vmware_player:2.0.1:*:*:*:*:*:*:*

OR cpe:/a:vmware:vmware_player:2.0.2:*:*:*:*:*:*:*

OR cpe:/a:vmware:vmware_player:2.0.3:*:*:*:*:*:*:*

OR cpe:/a:vmware:vmware_player:2.0.4:*:*:*:*:*:*:*

OR cpe:/a:vmware:vmware_player:2.0.5:*:*:*:*:*:*:*

OR cpe:/a:vmware:vmware_player:2.5:*:*:*:*:*:*:*

OR cpe:/a:vmware:vmware_player:2.5.1:*:*:*:*:*:*:*

OR cpe:/a:vmware:vmware_server:1.0:*:*:*:*:*:*:*

OR cpe:/a:vmware:vmware_server:1.0.0:*:*:*:*:*:*:*

OR cpe:/a:vmware:vmware_server:1.0.1:*:*:*:*:*:*:*

OR cpe:/a:vmware:vmware_server:1.0.2:*:*:*:*:*:*:*

OR cpe:/a:vmware:vmware_server:1.0.3:*:*:*:*:*:*:*

OR cpe:/a:vmware:vmware_server:1.0.4:*:*:*:*:*:*:*

OR cpe:/a:vmware:vmware_server:1.0.5:*:*:*:*:*:*:*

OR cpe:/a:vmware:vmware_server:1.0.6:*:*:*:*:*:*:*

OR cpe:/a:vmware:vmware_server:1.0.7:*:*:*:*:*:*:*

OR cpe:/a:vmware:vmware_server:1.05:*:*:*:*:*:*:*

OR cpe:/a:vmware:vmware_server:2.0:*:*:*:*:*:*:*

OR cpe:/a:vmware:vmware_workstation:4.5.3:*:*:*:*:*:*:*

OR cpe:/a:vmware:vmware_workstation:5.0:*:*:*:*:*:*:*

OR cpe:/a:vmware:vmware_workstation:5.5.0:*:*:*:*:*:*:*

OR cpe:/a:vmware:vmware_workstation:5.5.1:*:*:*:*:*:*:*

OR cpe:/a:vmware:vmware_workstation:5.5.2:*:*:*:*:*:*:*

OR cpe:/a:vmware:vmware_workstation:5.5.3:*:*:*:*:*:*:*

OR cpe:/a:vmware:vmware_workstation:5.5.4:*:*:*:*:*:*:*

OR cpe:/a:vmware:vmware_workstation:5.5.5:*:*:*:*:*:*:*

OR cpe:/a:vmware:vmware_workstation:5.5.6:*:*:*:*:*:*:*

OR cpe:/a:vmware:vmware_workstation:5.5.7:*:*:*:*:*:*:*

OR cpe:/a:vmware:vmware_workstation:5.5.8:*:*:*:*:*:*:*

OR cpe:/a:vmware:vmware_workstation:6.0:*:*:*:*:*:*:*

OR cpe:/a:vmware:vmware_workstation:6.0.0.45731:*:*:*:*:*:*:*

OR cpe:/a:vmware:vmware_workstation:6.0.1:*:*:*:*:*:*:*

OR cpe:/a:vmware:vmware_workstation:6.0.2:*:*:*:*:*:*:*

OR cpe:/a:vmware:vmware_workstation:6.0.3:*:*:*:*:*:*:*

OR cpe:/a:vmware:vmware_workstation:6.0.4:*:*:*:*:*:*:*

OR cpe:/a:vmware:vmware_workstation:6.0.4:build_93057:*:*:*:*:*:*

OR cpe:/a:vmware:vmware_workstation:6.0.5:*:*:*:*:*:*:*

OR cpe:/a:vmware:vmware_workstation:6.03:*:*:*:*:*:*:*

OR cpe:/a:vmware:vmware_workstation:6.5:*:*:*:*:*:*:*

OR cpe:/a:vmware:vmware_workstation:6.5.1:*:*:*:*:*:*:*

Configuration CCN 1:

cpe:/a:vmware:workstation:5.5.1:*:*:*:*:*:*:*

OR cpe:/a:vmware:workstation:6.0:*:*:*:*:*:*:*

OR cpe:/a:emc:vmware_player:*:*:*:*:*:*:*:*

OR cpe:/a:vmware:ace:1.0:*:*:*:*:*:*:*

OR cpe:/a:vmware:ace:1.0.3:*:*:*:*:*:*:*

OR cpe:/a:vmware:server:1.0.3:*:*:*:*:*:*:*

OR cpe:/a:vmware:workstation:5.5.3:*:*:*:*:*:*:*

OR cpe:/a:vmware:workstation:5.5.4:*:*:*:*:*:*:*

OR cpe:/a:vmware:ace:2.0.3:*:*:*:*:*:*:*

OR cpe:/a:vmware:ace:2.0.1:*:*:*:*:*:*:*

OR cpe:/a:vmware:ace:2.0.2:*:*:*:*:*:*:*

OR cpe:/a:vmware:workstation:5.0.0_build_13124:*:*:*:*:*:*:*

OR cpe:/a:vmware:server:1.0:*:*:*:*:*:*:*

OR cpe:/a:vmware:workstation:5.5.0:*:*:*:*:*:*:*

OR cpe:/a:vmware:workstation:5.5.2:*:*:*:*:*:*:*

OR cpe:/a:vmware:workstation:5.5.5:*:*:*:*:*:*:*

OR cpe:/a:vmware:workstation:5.5.6:*:*:*:*:*:*:*

OR cpe:/a:vmware:workstation:6.0.1:*:*:*:*:*:*:*

OR cpe:/a:vmware:workstation:6.0.2:*:*:*:*:*:*:*

OR cpe:/a:vmware:workstation:6.0.3:*:*:*:*:*:*:*

OR cpe:/a:vmware:ace:1.0.2:*:*:*:*:*:*:*

OR cpe:/a:vmware:ace:1.0.4:*:*:*:*:*:*:*

OR cpe:/a:vmware:ace:1.0.5:*:*:*:*:*:*:*

OR cpe:/a:vmware:server:1.0.1:*:*:*:*:*:*:*

OR cpe:/a:vmware:server:1.0.2:*:*:*:*:*:*:*

OR cpe:/a:vmware:server:1.0.4:*:*:*:*:*:*:*

OR cpe:/a:vmware:server:1.0.5:*:*:*:*:*:*:*

OR cpe:/a:vmware:workstation:5.5.8:*:*:*:*:*:*:*

OR cpe:/a:vmware:server:1.0.7:*:*:*:*:*:*:*

OR cpe:/a:vmware:ace:1.0.7:*:*:*:*:*:*:*

OR cpe:/a:vmware:server:1.0.6:*:*:*:*:*:*:*

OR cpe:/a:vmware:workstation:5.5.7:*:*:*:*:*:*:*

OR cpe:/a:vmware:workstation:6.0.4:*:*:*:*:*:*:*

OR cpe:/a:vmware:workstation:6.0.5:*:*:*:*:*:*:*

OR cpe:/a:vmware:ace:2.0.5:*:*:*:*:*:*:*

OR cpe:/a:vmware:workstation:6.5:*:*:*:*:*:*:*

OR cpe:/a:vmware:server:2.0:*:*:*:*:*:*:*

OR cpe:/a:vmware:workstation:6.5.1:*:*:*:*:*:*:*

OR cpe:/a:vmware:ace:2.5.1:*:*:*:*:*:*:*

OR cpe:/a:vmware:esxi:3.5:*:*:*:*:*:*:*

OR cpe:/a:vmware:esx:3.5:*:*:*:*:*:*:*

OR cpe:/a:vmware:esx:3.0.3:*:*:*:*:*:*:*

OR cpe:/a:vmware:esx:3.0.2:*:*:*:*:*:*:*

Denotes that component is vulnerable

Oval Definitions

Definition ID	Class	Title	Last Modified
oval:org.mitre.oval:def:6439	V	VMware Guest Virtual Device Driver Bug Lets Local Users Deny Service	2009-11-09