QwikSec

Security Database

CVE

CWE

Training

CVE-2008-3761

Published: Aug 21, 2008

Modified: Aug 7, 2024

PUBLISHED

Description

hcmon.sys in VMware Workstation 6.5.1 and earlier, VMware Player 2.5.1 and earlier, VMware ACE 2.5.1 and earlier, and VMware Server 1.0.x before 1.0.9 build 156507 and 2.0.x before 2.0.1 build 156745 uses the METHOD_NEITHER communication method for IOCTLs, which allows local users to cause a denial of service via a crafted IOCTL request.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

vmware-workstation-hcmon-dos(44539)

vdb-entry

x_refsource_XF

third-party-advisory

x_refsource_SREASON

20090403 VMSA-2009-0005 VMware Hosted products, VI Client and patches for ESX and ESXi resolve multiple security issues

mailing-list

x_refsource_FULLDISC

vdb-entry

x_refsource_BID

vdb-entry

x_refsource_BID

vdb-entry

x_refsource_SECTRACK

http://www.orange-bat.com/adv/2008/adv.08.17.txt

x_refsource_MISC

vdb-entry

x_refsource_VUPEN

[security-announce] 20090403 VMSA-2009-0005 VMware Hosted products, VI Client and patches for ESX and ESXi resolve multiple security issues

mailing-list

x_refsource_MLIST

http://www.vmware.com/security/advisories/VMSA-2009-0005.html

x_refsource_CONFIRM

exploit

x_refsource_EXPLOIT-DB

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.