CVE-2008-2098

Severity: medium (CVSS 6.9 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2008-06-02 · updated 2026-06-16
Weakness: CWE-119

Description

Heap-based buffer overflow in the VMware Host Guest File System (HGFS) in VMware Workstation 6 before 6.0.4 build 93057, VMware Player 2 before 2.0.4 build 93057, VMware ACE 2 before 2.0.2 build 93057, and VMware Fusion before 1.1.2 build 87978, when folder sharing is used, allows guest OS users to execute arbitrary code on the host OS via unspecified vectors.

Affected products

VMware Ace 2: 2.0, 2.01
VMware Fusion: 1.1, 1.1.1
Vmware Player 2: 2.0, 2.01, 2.02, 2.03
Vmware Workstation: 6.0.1, 6.0.2, 6.03
VMware Workstation: 6.0

References

http://secunia.com/advisories/30476
http://security.gentoo.org/glsa/glsa-201209-25.xml
http://www.securityfocus.com/archive/1/492831/100/0/threaded
http://www.securitytracker.com/id?1020148
http://www.vmware.com/security/advisories/VMSA-2008-0008.html
http://www.vupen.com/english/advisories/2008/1707/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/42753
http://secunia.com/advisories/30476
http://security.gentoo.org/glsa/glsa-201209-25.xml
http://www.securityfocus.com/archive/1/492831/100/0/threaded
http://www.securitytracker.com/id?1020148
http://www.vmware.com/security/advisories/VMSA-2008-0008.html

Get alerted when CVE-2008-2098 or the next vulnerability affects your stack