{"schemaVersion":3,"id":"CVE-2008-4279","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"The CPU hardware emulation for 64-bit guest operating systems in VMware Workstation 6.0.x before 6.0.5 build 109488 and 5.x before 5.5.8 build 108000; Player 2.0.x before 2.0.5 build 109488 and 1.x before 1.0.8; Server 1.x before 1.0.7 build 108231; and ESX 2.5.4 through 3.5 allows authenticated guest OS users to gain additional guest OS privileges by triggering an exception that causes the virtual CPU to perform an indirect jump to a non-canonical address.","dates":{"published":"2008-10-06T18:00:00.000Z","modified":"2024-08-07T10:08:34.960Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":6.8,"severity":"medium","version":"2.0","versionLabel":"v2.0","source":"NVD","vector":"AV:L/AC:L/Au:S/C:C/I:C/A:C","computed":false,"selection":"backend-summary"},"metrics":[{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":6.8,"severity":"medium","vector":"AV:L/AC:L/Au:S/C:C/I:C/A:C","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00393,"percentile":0.31901,"severity":"low","asOf":"2026-10-18T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-18T00:00:00.000Z","baselineScore":0.00393},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00393,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00393,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00393,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00393,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00393,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00393,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00393,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00393,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00393,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00393,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00393,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00393,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00393,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00393,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00393,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00393,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00393,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00393,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00393,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00393,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00393,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00393,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00393,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00393,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00393,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00393,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00393,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00393,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00393,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00393,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00393,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00393,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00393,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00393,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00393,"percentile":0.31901}],"last30":[{"date":"2026-09-18T00:00:00.000Z","score":0.00393,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00393,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00393,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00393,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00393,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00393,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00393,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00393,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00393,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00393,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00393,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00393,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00393,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00393,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00393,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00393,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00393,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00393,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00393,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00393,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00393,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00393,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00393,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00393,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00393,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00393,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00393,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00393,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00393,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00393,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00393,"percentile":0.31901}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-264","name":"Permissions, Privileges, and Access Controls","description":"Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.","type":"category","status":"Obsolete","abstraction":null,"likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/264.html"}],"affected":[{"vendor":"vmware","product":"esx","name":"esx","label":"esx","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"≥ 2.5.4, ≤ 3.5","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 2.5.4, ≤ 3.5","eol":null,"hubHref":"/vendor/vmware/esx"},{"vendor":"vmware","product":"player","name":"player","label":"player","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 1.0, < 1.0.8","noFixRecorded":false,"fixedIn":null},{"text":"≥ 2.0, < 2.0.5","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 1.0, < 1.0.8 | ≥ 2.0, < 2.0.5","eol":null,"hubHref":"/vendor/vmware/player"},{"vendor":"vmware","product":"server","name":"server","label":"server","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 1.0, < 1.0.8","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 1.0, < 1.0.8","eol":null,"hubHref":"/vendor/vmware/server"},{"vendor":"vmware","product":"workstation","name":"workstation","label":"workstation","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 5.5, < 5.5.8","noFixRecorded":false,"fixedIn":null},{"text":"≥ 6.0, < 6.0.5","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 5.5, < 5.5.8 | ≥ 6.0, < 6.0.5","eol":null,"hubHref":"/vendor/vmware/workstation"}],"affectedCount":4,"eol":{"hasEol":false,"count":0},"references":[{"url":"http://marc.info/?l=bugtraq&m=122331139823057&w=2","label":"marc.info?l=bugtraq&m=122331139823057&w=2","hostname":"marc.info","tags":["Mailing List","X Refsource BUGTRAQ","Third Party Advisory"]},{"url":"http://secunia.com/advisories/32157","label":"secunia.com/advisories/32157","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-October/064860.html","label":"lists.grok.org.uk/pipermail/full-disclosure/2008-October/064860.html","hostname":"lists.grok.org.uk","tags":["Mailing List","X Refsource FULLDISC","Third Party Advisory"]},{"url":"http://secunia.com/advisories/32179","label":"secunia.com/advisories/32179","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.vupen.com/english/advisories/2008/2740","label":"www.vupen.com/english/advisories/2008/2740","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN","Third Party Advisory"]},{"url":"http://secunia.com/advisories/32180","label":"secunia.com/advisories/32180","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0016.html","label":"www.vmware.com/security/advisories/VMSA-2008-0016.html","hostname":"www.vmware.com","tags":["X Refsource CONFIRM","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45668","label":"exchange.xforce.ibmcloud.com/vulnerabilities/45668","hostname":"exchange.xforce.ibmcloud.com","tags":["VDB Entry","X Refsource XF","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/31569","label":"www.securityfocus.com/bid/31569","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID","Third Party Advisory"]},{"url":"http://www.securitytracker.com/id?1020991","label":"www.securitytracker.com/id?1020991","hostname":"www.securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK","Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/497041/100/0/threaded","label":"www.securityfocus.com/archive/1/497041/100/0/threaded","hostname":"www.securityfocus.com","tags":["Mailing List","X Refsource BUGTRAQ","Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5929","label":"oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5929","hostname":"oval.cisecurity.org","tags":["VDB Entry","Signature","X Refsource OVAL","Third Party Advisory"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2008-10-06T18:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-07T10:08:34.960Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":27,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T13:12:18.827Z","stale":false,"partial":false}}