CVE-2008-2099: VMware Ace 2

Medium severity, CVSS 6.9. EPSS: 0.4% chance of exploitation in the next 30 days.

Unspecified vulnerability in VMCI in VMware Workstation 6 before 6.0.4 build 93057, VMware Player 2 before 2.0.4 build 93057, and VMware ACE 2 before 2.0.2 build 93057 on Windows allows guest OS users to execute arbitrary code on the host OS via unspecified vectors.

Affected products

• VMware Ace 2: version 2.0 only; version 2.0.1 only
• VMware VMware Player 2: version 2.0 only; version 2.0.1 only; version 2.0.2 only; version 2.0.3 only
• VMware VMware Workstation: version 6.0.1 only; version 6.0.2 only; version 6.0.3 only
• VMware Workstation: version 6.0 only

Published 2008-06-02. Last modified 2026-06-16.