CVE-2008-2100

Multiple buffer overflows in VIX API 1.1.x before 1.1.4 build 93057 on VMware Workstation 5.x and 6.x, VMware Player 1.x and 2.x, VMware ACE 2.x, VMware Server 1.x, VMware Fusion 1.x, VMware ESXi 3.5, and VMware ESX 3.0.1 through 3.5 allow guest OS users to execute arbitrary code on the host OS via unspecified vectors.

• CWE-119

• http://secunia.com/advisories/30556Third Party Advisory
• http://security.gentoo.org/glsa/glsa-201209-25.xmlThird Party Advisory
• http://securityreason.com/securityalert/3922Third Party Advisory
• http://securitytracker.com/id?1020200Third Party Advisory, VDB Entry
• http://www.securityfocus.com/archive/1/493080/100/0/threadedThird Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/29552Third Party Advisory, VDB Entry
• http://www.vmware.com/security/advisories/VMSA-2008-0009.htmlVendor Advisory
• http://www.vupen.com/english/advisories/2008/1744Permissions Required
• https://exchange.xforce.ibmcloud.com/vulnerabilities/42872Third Party Advisory, VDB Entry
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5081Third Party Advisory
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5647Third Party Advisory
• http://secunia.com/advisories/30556Third Party Advisory
• http://security.gentoo.org/glsa/glsa-201209-25.xmlThird Party Advisory
• http://securityreason.com/securityalert/3922Third Party Advisory
• http://securitytracker.com/id?1020200Third Party Advisory, VDB Entry
• http://www.securityfocus.com/archive/1/493080/100/0/threadedThird Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/29552Third Party Advisory, VDB Entry
• http://www.vmware.com/security/advisories/VMSA-2008-0009.htmlVendor Advisory
• http://www.vupen.com/english/advisories/2008/1744Permissions Required
• https://exchange.xforce.ibmcloud.com/vulnerabilities/42872Third Party Advisory, VDB Entry
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5081Third Party Advisory
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5647Third Party Advisory

Published

Jun 5, 2008

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-2094SQL injection vulnerability in article.php in the Article mo…
• CVE-2008-2095SQL injection vulnerability in index.php in the FlippingBook…
• CVE-2008-2096SQL injection vulnerability in BackLinkSpider allows remote …
• CVE-2008-2097Buffer overflow in the openwsman management service in VMwar…
• CVE-2008-2098Heap-based buffer overflow in the VMware Host Guest File Sys…
• CVE-2008-2099Unspecified vulnerability in VMCI in VMware Workstation 6 be…
• CVE-2008-2101The VMware Consolidated Backup (VCB) command-line utilities …
• CVE-2008-2103Cross-site scripting (XSS) vulnerability in Bugzilla 2.17.2 …
• CVE-2008-2104The WebService in Bugzilla 3.1.3 allows remote authenticated…
• CVE-2008-2105email_in.pl in Bugzilla 2.23.4, 3.0.x before 3.0.4, and 3.1.…
• CVE-2008-2106Call of Duty 4 (CoD4) 1.5 and earlier allows remote authenti…
• CVE-2008-2107The GENERATE_SEED macro in PHP 4.x before 4.4.8 and 5.x befo…