CVE-2008-4917: VMware Esx

High severity, CVSS 7.2. EPSS: 0.5% chance of exploitation in the next 30 days.

Unspecified vulnerability in VMware Workstation 5.5.8 and earlier, and 6.0.5 and earlier 6.x versions; VMware Player 1.0.8 and earlier, and 2.0.5 and earlier 2.x versions; VMware Server 1.0.9 and earlier; VMware ESXi 3.5; and VMware ESX 3.0.2 through 3.5 allows guest OS users to have an unknown impact by sending the virtual hardware a request that triggers an arbitrary physical-memory write operation, leading to memory corruption.

Affected products

• VMware Esx: from 3.0.2, up to and including 3.5
• VMware ESXi: version 3.5 only
• VMware Player: from 1.0.0, up to and including 1.0.8; from 2.0, up to and including 2.0.5
• VMware Server: from 1.0, up to and including 1.0.9
• VMware Workstation: from 5.5, up to and including 5.5.8; from 6.0, up to and including 6.0.5

Published 2008-12-09. Last modified 2026-06-16.