CVE-2008-1361: VMware Ace

Medium severity, CVSS 6.8. EPSS: 0.3% chance of exploitation in the next 30 days.

VMware Workstation 6.0.x before 6.0.3 and 5.5.x before 5.5.6, VMware Player 2.0.x before 2.0.3 and 1.0.x before 1.0.6, VMware ACE 2.0.x before 2.0.1 and 1.0.x before 1.0.5, and VMware Server 1.0.x before 1.0.5 on Windows allow local users to gain privileges via an unspecified manipulation that causes the authd process to connect to an arbitrary named pipe, a different vulnerability than CVE-2008-1362.

Affected products

• VMware Ace: version 1.0 only; version 1.0.1 only; version 1.0.2 only; version 1.0.3 only; version 1.0.4 only; version 2.0 only
• VMware Player: version 1.0.2 only; version 1.0.3 only; version 1.0.4 only; version 1.0.5 only; version 2.0 only; version 2.0.1 only; …
• VMware Server: version 1.0.3 only
• VMware VMware Server: version 1.0.0 only; version 1.0.1 only; version 1.0.2 only; version 1.0.3 only; version 1.0.4 only
• VMware VMware Workstation: version 5.5.5 only; version 6.0.1 only; version 6.0.2 only
• VMware Workstation: version 5.5 only; version 5.5.3_build_34685 only; version 5.5.3_build_42958 only; version 5.5.4 only; version 5.5.4_build_44386 only; version 6.0 only

Published 2008-03-20. Last modified 2026-06-16.