Search/CVE-2008-2100
● CVE

CVE-2008-2100

VendorvmwareProductfusion, workstation, esxi, esx, server, player, esx server, aceDiscoveredJun 5, 2008UpdatedApr 23, 2026

Multiple buffer overflows in VIX API 1.1.x before 1.1.4 build 93057 on VMware Workstation 5.x and 6.x, VMware Player 1.x and 2.x, VMware ACE 2.x, VMware Server 1.x, VMware Fusion 1.x, VMware ESXi 3.5, and VMware ESX 3.0.1 through 3.5 allow guest OS users to execute arbitrary code on the host OS via unspecified vectors.

CVSS v3.1
—
EPSS
0.60%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
Connections
9 relationships
Timeline
disclosure → media coverage
Jun 5, 2008
Disclosure — published as a CVE record. · last revised by NVD Apr 23, 2026