CVE-2008-4915

The CPU hardware emulation in VMware Workstation 6.0.5 and earlier and 5.5.8 and earlier; Player 2.0.x through 2.0.5 and 1.0.x through 1.0.8; ACE 2.0.x through 2.0.5 and earlier, and 1.0.x through 1.0.7; Server 1.0.x through 1.0.7; ESX 2.5.4 through 3.5; and ESXi 3.5, when running 32-bit and 64-bit guest operating systems, does not properly handle the Trap flag, which allows authenticated guest OS users to gain privileges on the guest OS.

• CWE-264

• http://lists.vmware.com/pipermail/security-announce/2008/000042.htmlVendor Advisory
• http://secunia.com/advisories/32612Third Party Advisory
• http://secunia.com/advisories/32624Third Party Advisory
• http://security.gentoo.org/glsa/glsa-201209-25.xmlThird Party Advisory
• http://www.securityfocus.com/archive/1/498138/100/0/threadedThird Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/32168Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id?1021154Third Party Advisory, VDB Entry
• http://www.vmware.com/security/advisories/VMSA-2008-0018.htmlVendor Advisory
• http://www.vupen.com/english/advisories/2008/3052Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46415Third Party Advisory, VDB Entry
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6309Third Party Advisory
• http://lists.vmware.com/pipermail/security-announce/2008/000042.htmlVendor Advisory
• http://secunia.com/advisories/32612Third Party Advisory
• http://secunia.com/advisories/32624Third Party Advisory
• http://security.gentoo.org/glsa/glsa-201209-25.xmlThird Party Advisory
• http://www.securityfocus.com/archive/1/498138/100/0/threadedThird Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/32168Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id?1021154Third Party Advisory, VDB Entry
• http://www.vmware.com/security/advisories/VMSA-2008-0018.htmlVendor Advisory
• http://www.vupen.com/english/advisories/2008/3052Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46415Third Party Advisory, VDB Entry
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6309Third Party Advisory

Published

Nov 10, 2008

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-4909Cross-site request forgery (CSRF) vulnerability in CompactCM…
• CVE-2008-4910The BasicService in Sun Java Web Start allows remote attacke…
• CVE-2008-4911PHP remote file inclusion vulnerability in read.php in Chatt…
• CVE-2008-4912SQL injection vulnerability in popup_img.php in the fotogale…
• CVE-2008-4913Directory traversal vulnerability in admin.php in LokiCMS 0.…
• CVE-2008-4914Unspecified vulnerability in VMware ESXi 3.5 before ESXe350-…
• CVE-2008-4916Unspecified vulnerability in a guest virtual device driver i…
• CVE-2008-4917Unspecified vulnerability in VMware Workstation 5.5.8 and ea…
• CVE-2008-4918Cross-site scripting (XSS) vulnerability in SonicWALL SonicO…
• CVE-2008-4919Insecure method vulnerability in VISAGESOFT eXPert PDF Viewe…
• CVE-2008-4920Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2008-4921board/admin/reguser.php in Chipmunk CMS 1.3 allows remote at…