Unscored severity · published Aug 21, 2008
CVE-2008-3761
hcmon.sys in VMware Workstation 6.5.1 and earlier, VMware Player 2.5.1 and earlier, VMware ACE 2.5.1 and earlier, and VMware Server 1.0.x before 1.0.9 build 156507 and 2.0.x…
–
CVSS
1%
EPSS
No
On KEV
Description
hcmon.sys in VMware Workstation 6.5.1 and earlier, VMware Player 2.5.1 and earlier, VMware ACE 2.5.1 and earlier, and VMware Server 1.0.x before 1.0.9 build 156507 and 2.0.x before 2.0.1 build 156745 uses the METHOD_NEITHER communication method for IOCTLs, which allows local users to cause a denial of service via a crafted IOCTL request.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 63% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
VW
Vmware Workstation · Vmware
6.0.0.45731 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-3761
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-3761
lists.vmware.com
http://lists.vmware.com/pipermail/security-announce/2009/000054.html
seclists.org
http://seclists.org/fulldisclosure/2009/Apr/0036.html
securityreason.com
http://securityreason.com/securityalert/4177
www.orange-bat.com
http://www.orange-bat.com/adv/2008/adv.08.17.txt
www.securityfocus.com
http://www.securityfocus.com/bid/30737
www.securityfocus.com
http://www.securityfocus.com/bid/34373
More from Vmware Workstation
9.3
CVE-2026-59346
VMware Workstation and Fusion VMXNET3 integer-overflow vulnerability
8.2
CVE-2024-22267
VMware Workstation and Fusion contain a use-after-free vulnerability in the vbluetooth device. A malicious actor with local administrative privileges on a virtual machine may…
8.1
CVE-2026-59347
VMware Workstation and Fusion HGFS stack-based buffer-overflow vulnerability
6.7
CVE-2024-22253
Use-after-free vulnerability
6.7
CVE-2024-22252
Use-after-free vulnerability