CVE-2008-4279

The CPU hardware emulation for 64-bit guest operating systems in VMware Workstation 6.0.x before 6.0.5 build 109488 and 5.x before 5.5.8 build 108000; Player 2.0.x before 2.0.5 build 109488 and 1.x before 1.0.8; Server 1.x before 1.0.7 build 108231; and ESX 2.5.4 through 3.5 allows authenticated guest OS users to gain additional guest OS privileges by triggering an exception that causes the virtual CPU to perform an indirect jump to a non-canonical address.

• CWE-264

• http://lists.grok.org.uk/pipermail/full-disclosure/2008-October/064860.htmlThird Party Advisory
• http://marc.info/?l=bugtraq&m=122331139823057&w=2Mailing List, Third Party Advisory
• http://secunia.com/advisories/32157Third Party Advisory
• http://secunia.com/advisories/32179Third Party Advisory
• http://secunia.com/advisories/32180Third Party Advisory
• http://www.securityfocus.com/archive/1/497041/100/0/threadedThird Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/31569Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id?1020991Third Party Advisory, VDB Entry
• http://www.vmware.com/security/advisories/VMSA-2008-0016.htmlPatch, Vendor Advisory
• http://www.vupen.com/english/advisories/2008/2740Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45668Third Party Advisory, VDB Entry
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5929Third Party Advisory
• http://lists.grok.org.uk/pipermail/full-disclosure/2008-October/064860.htmlThird Party Advisory
• http://marc.info/?l=bugtraq&m=122331139823057&w=2Mailing List, Third Party Advisory
• http://secunia.com/advisories/32157Third Party Advisory
• http://secunia.com/advisories/32179Third Party Advisory
• http://secunia.com/advisories/32180Third Party Advisory
• http://www.securityfocus.com/archive/1/497041/100/0/threadedThird Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/31569Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id?1020991Third Party Advisory, VDB Entry
• http://www.vmware.com/security/advisories/VMSA-2008-0016.htmlPatch, Vendor Advisory
• http://www.vupen.com/english/advisories/2008/2740Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45668Third Party Advisory, VDB Entry
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5929Third Party Advisory

Published

Oct 6, 2008

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-4273Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2008-4274Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2008-4275Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2008-4276Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2008-4277Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2008-4278VMware VirtualCenter 2.5 before Update 3 build 119838 on Win…
• CVE-2008-4281Directory traversal vulnerability in VMWare ESXi 3.5 before …
• CVE-2008-4283CRLF injection vulnerability in the WebContainer component i…
• CVE-2008-4284Open redirect vulnerability in the ibm_security_logout servl…
• CVE-2008-4285Unspecified vulnerability in the Performance Monitoring Infr…
• CVE-2008-4292Opera before 9.52 does not check the CRL override upon encou…
• CVE-2008-4293Unspecified vulnerability in Opera before 9.52 on Windows, w…