CVE-2008-1340
Virtual Machine Communication Interface (VMCI) in VMware Workstation 6.0.x before 6.0.3, VMware...
CVE-2008-1340 is a high vulnerability (CVSS 7.1) in Vmware Ace, published March 20, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.74%, the 78th percentile. No source names a fixed version.
- Severity
- 7.1 HighCVSS 2.0, NVD
- Exploit chance
- 1.74%EPSS, 78th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
Virtual Machine Communication Interface (VMCI) in VMware Workstation 6.0.x before 6.0.3, VMware Player 2.0.x before 2.0.3, and VMware ACE 2.0.x before 2.0.1 allows attackers to cause a denial of service (host OS crash) via crafted VMCI calls that trigger "memory exhaustion and memory corruption."
Exploit likelihood
Affected products
What each source reports
NVD Score used
Virtual Machine Communication Interface (VMCI) in VMware Workstation 6.0.x before 6.0.3, VMware Player 2.0.x before 2.0.3, and VMware ACE 2.0.x before 2.0.1 allows attackers to cause a denial of service (host OS crash) via crafted VMCI calls that trigger "memory exhaustion and memory corruption."
- Record
CVE-2008-1340- CVSS 2.0
- 7.1 High
AV:N/AC:M/Au:N/C:N/I:N/A:C - Weakness
- CWE-399
- Updated
- 2026-11-02
CVE ListNo score
Virtual Machine Communication Interface (VMCI) in VMware Workstation 6.0.x before 6.0.3, VMware Player 2.0.x before 2.0.3, and VMware ACE 2.0.x before 2.0.1 allows attackers to cause a denial of service (host OS crash) via crafted VMCI calls that trigger "memory exhaustion and memory corruption."
- Record
CVE-2008-1340- Updated
- 2026-11-02
EUVDEUVD-2008-1347No score
Virtual Machine Communication Interface (VMCI) in VMware Workstation 6.0.x before 6.0.3, VMware Player 2.0.x before 2.0.3, and VMware ACE 2.0.x before 2.0.1 allows attackers to cause a denial of service (host OS crash) via crafted VMCI calls that trigger "memory exhaustion and memory corruption."
- Record
EUVD-2008-1347- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-77qh-qg3x-6q7qNo score
Virtual Machine Communication Interface (VMCI) in VMware Workstation 6.0.x before 6.0.3, VMware...
Virtual Machine Communication Interface (VMCI) in VMware Workstation 6.0.x before 6.0.3, VMware Player 2.0.x before 2.0.3, and VMware ACE 2.0.x before 2.0.1 allows attackers to cause a denial of service (host OS crash) via crafted VMCI calls that trigger "memory exhaustion and memory corruption."
- Record
GHSA-77qh-qg3x-6q7q- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
security.gentoo.org/glsa/glsa-201209-25.xml
securityreason.com/securityalert/3755
exchange.xforce.ibmcloud.com/vulnerabilities/41250
securitytracker.com/id?1019624
vmware.com/support/ace2/doc/releasenotes_ace2.html
Show 9 moreShow less
securityfocus.com/bid/28289
lists.vmware.com/pipermail/security-announce/2008/000008.html
vupen.com/english/advisories/2008/0905/references
nvd.nist.gov/vuln/detail/CVE-2008-1340
github.com/advisories/GHSA-77qh-qg3x-6q7q