CVE-2008-1363

VMware Workstation 6.0.x before 6.0.3 and 5.5.x before 5.5.6, VMware Player 2.0.x before 2.0.3 and 1.0.x before 1.0.6, VMware ACE 2.0.x before 2.0.1 and 1.0.x before 1.0.5, and VMware Server 1.0.x before 1.0.5 on Windows allow local users to gain privileges via an unspecified manipulation of a config.ini file located in an Application Data folder, which can be used for "hijacking the VMX process."

Link	Resource
http://lists.vmware.com/pipermail/security-announce/2008/000008.html	Vendor Advisory
http://www.vmware.com/security/advisories/VMSA-2008-0005.html	Patch Vendor Advisory
http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html	Patch Vendor Advisory
http://www.vmware.com/support/player/doc/releasenotes_player.html	Patch Vendor Advisory
http://www.vmware.com/support/player2/doc/releasenotes_player2.html	Patch Vendor Advisory
http://www.vmware.com/support/server/doc/releasenotes_server.html	Patch Vendor Advisory
http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html	Patch Vendor Advisory
http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html	Patch Vendor Advisory
http://www.securityfocus.com/bid/28276	Patch Third Party Advisory
http://securitytracker.com/id?1019622	Third Party Advisory VDB Entry
http://securityreason.com/securityalert/3755	Third Party Advisory
http://www.vupen.com/english/advisories/2008/0905/references	Third Party Advisory
http://security.gentoo.org/glsa/glsa-201209-25.xml	Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/41252	Third Party Advisory VDB Entry
http://www.securityfocus.com/archive/1/489739/100/0/threaded	VDB Entry Third Party Advisory

Configuration 1

---

Published : 2008-03-20 12:44

Updated : 2018-11-01 04:24

---

NVD link : CVE-2008-1363

Mitre link : CVE-2008-1363

No products.

CWE-264