CVE-2008-2100: VMware Ace

High severity, CVSS 7.2. EPSS: 0.6% chance of exploitation in the next 30 days.

Multiple buffer overflows in VIX API 1.1.x before 1.1.4 build 93057 on VMware Workstation 5.x and 6.x, VMware Player 1.x and 2.x, VMware ACE 2.x, VMware Server 1.x, VMware Fusion 1.x, VMware ESXi 3.5, and VMware ESX 3.0.1 through 3.5 allow guest OS users to execute arbitrary code on the host OS via unspecified vectors.

Affected products

• VMware Ace: from 1.0, up to and including 1.0.5; from 2.0, up to and including 2.0.3
• VMware Esx: version 2.5.4 only; version 2.5.5 only; version 3.0.0 only; version 3.0.1 only; version 3.0.2 only; version 3.5 only
• VMware Esx Server: version 3.0 only; version 3.5 only
• VMware ESXi: version 3.5 only
• VMware Fusion: up to and including 1.1.1
• VMware Player: from 1.0.0, up to and including 1.0.6; from 2.0, up to and including 2.0.3
• VMware Server: up to and including 1.0.5
• VMware Workstation: from 5.5, up to and including 5.5.6; from 6.0, up to and including 6.0.3

Published 2008-06-05. Last modified 2026-06-16.