CVE-2008-4916: vmware vmware_ace
Vulnerability summary
CVE-2008-4916 is a medium (CVSS 4.6) vulnerability in vmware vmware_ace. EPSS estimates a 0.33% chance of exploitation in the next 30 days, higher than 25.1% of scored vulnerabilities.
Timeline
- 06-04-2009PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
Unspecified vulnerability in a guest virtual device driver in VMware Workstation before 5.5.9 build 126128, and 6.5.1 and earlier 6.x versions; VMware Player before 1.0.9 build 126128, and 2.5.1 and earlier 2.x versions; VMware ACE before 1.0.8 build 125922, and 2.5.1 and earlier 2.x versions; VMware Server 1.x before 1.0.8 build 126538 and 2.0.x before 2.0.1 build 156745; VMware Fusion before 2.0.1; VMware ESXi 3.5; and VMware ESX 3.0.2, 3.0.3, and 3.5 allows guest OS users to cause a denial of service (host OS crash) via unknown vectors.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
0.33%
Chance of exploitation in the next 30 days
Percentile
25%
Versus all other CVEs
30-day change
0.00 pp
From 0.33% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Vmware6 products
- vmware_ace1.0 | 1.0.2 | 1.0.3 | 1.0.4 | 1.0.5 | 1.0.7 | 1.0.8 | 2.0.1 | 2.0.2 | 2.0.3 | 2.0.5 | 2.5 | 2.5.1
- vmware_esx3.0.2 | 3.0.3 | 3.5
- vmware_esxi3.5
- vmware_player1.0.0 | 1.0.1 | 1.0.2 | 1.0.3 | 1.0.4 | 1.0.5 | 1.0.6 | 1.0.7 | 1.0.8 | 1.0.9 | 2.0 | 2.0.1 | 2.0.2 | 2.0.3 | 2.0.4 | 2.0.5 | 2.5 | 2.5.1
- vmware_server1.0 | 1.0.0 | 1.0.1 | 1.0.2 | 1.0.3 | 1.0.4 | 1.0.5 | 1.0.6 | 1.0.7 | 2.0
1 vendor · 6 products
References
8 links- www.vmware.com/security/advisories/VMSA-2009-0005.htmlX Refsource CONFIRM
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6439VDB EntrySignatureX Refsource OVAL