VYPR
← All advisories
Unrated severityNVD Advisory· Published Mar 20, 2008· Updated Jun 16, 2026

CVE-2008-1363

CVE-2008-1363

Description

VMware Workstation 6.0.x before 6.0.3 and 5.5.x before 5.5.6, VMware Player 2.0.x before 2.0.3 and 1.0.x before 1.0.6, VMware ACE 2.0.x before 2.0.1 and 1.0.x before 1.0.5, and VMware Server 1.0.x before 1.0.5 on Windows allow local users to gain privileges via an unspecified manipulation of a config.ini file located in an Application Data folder, which can be used for "hijacking the VMX process."

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

8
  • VMware/Ace2 versions
    cpe:2.3:a:vmware:ace:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:vmware:ace:*:*:*:*:*:*:*:*range: >=1.0,<1.0.5
    • (no CPE)range: <2.0.1, <1.0.5
  • VMware/Player2 versions
    cpe:2.3:a:vmware:player:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:vmware:player:*:*:*:*:*:*:*:*range: >=1.0.0,<1.0.6
    • (no CPE)range: <2.0.3, <1.0.6
  • VMware/Server2 versions
    cpe:2.3:a:vmware:server:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:vmware:server:*:*:*:*:*:*:*:*range: >=1.0,<1.0.5
    • (no CPE)range: <1.0.5
  • VMware/Workstation2 versions
    cpe:2.3:a:vmware:workstation:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:vmware:workstation:*:*:*:*:*:*:*:*range: >=5.5,<5.5.6
    • (no CPE)range: <6.0.3, <5.5.6

Patches

Vulnerability mechanics

References

15

News mentions

0

No linked articles in our index yet.