CVE-2008-4917: vmware esx Resource Management Errors
Vulnerability summary
CVE-2008-4917 is a high (CVSS 7.2) Resource Management Errors vulnerability in vmware esx. EPSS estimates a 0.46% chance of exploitation in the next 30 days, higher than 38.6% of scored vulnerabilities.
Timeline
- 09-12-2008PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
Unspecified vulnerability in VMware Workstation 5.5.8 and earlier, and 6.0.5 and earlier 6.x versions; VMware Player 1.0.8 and earlier, and 2.0.5 and earlier 2.x versions; VMware Server 1.0.9 and earlier; VMware ESXi 3.5; and VMware ESX 3.0.2 through 3.5 allows guest OS users to have an unknown impact by sending the virtual hardware a request that triggers an arbitrary physical-memory write operation, leading to memory corruption.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
0.46%
Chance of exploitation in the next 30 days
Percentile
39%
Versus all other CVEs
30-day change
0.00 pp
From 0.46% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Vmware5 products
- esx≥ 3.0.2, ≤ 3.5
- esxi3.5
- player≥ 1.0.0, ≤ 1.0.8 | ≥ 2.0, ≤ 2.0.5
- server≥ 1.0, ≤ 1.0.9
- workstation≥ 5.5, ≤ 5.5.8 | ≥ 6.0, ≤ 6.0.5
1 vendor · 5 products
References
10 links- www.securityfocus.com/archive/1/498863/100/0/threadedMailing ListX Refsource BUGTRAQThird Party AdvisoryVDB Entry
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6246VDB EntrySignatureX Refsource OVALThird Party Advisory
- www.securityfocus.com/archive/1/498886/100/0/threadedMailing ListX Refsource BUGTRAQThird Party AdvisoryVDB Entry