VMSA-2008-0016 VMware Hosted products, VirtualCenter Update 3 and patches for ESX and ESXi resolve multiple security issues

               VMware Security Advisory

  Extended support &#40;Security and Bug fixes&#41; for ESX 3.0.2 ends
  on 10/29/2008 and Extended support for ESX 3.0.2 Update 1
  ends on 8/8/2009.  Users should plan to upgrade to ESX 3.0.3
  and preferably to the newest release available.

  Extended Support &#40;Security and Bug fixes&#41; for ESX 3.0.1 has
  ended on 2008-07-31.

VMware products emulate hardware functions, like CPU, Memory, and
IO.

A flaw in VMware&#39;s CPU hardware emulation could allow the
virtual CPU to jump to an incorrect memory address. Exploitation of
this issue on the guest operating system does not lead to a
compromise of the host system but could lead to a privilege
escalation on guest operating system.  An attacker would need to
have a user account on the guest operating system.

Affected
64-bit Windows and 64-bit FreeBSD guest operating systems and
possibly other 64-bit operating systems. The issue does not
affect the 64-bit versions of Linux guest operating systems.

VMware would like to thank Derek Soeder for discovering
this issue and working with us on its remediation.

The Common Vulnerabilities and Exposures Project &#40;cve.mitre.org&#41;
has assigned the name CVE-2008-4279 this issue.

The following table lists what action remediates the vulnerability
&#40;column 4&#41; if a solution is available.

VMware         Product   Running  Replace with/
Product        Version   on       Apply Patch
=============  ========  =======  =================
VirtualCenter  any       Windows  not affected

Workstation    6.5.x     any      not affected
Workstation    6.0.x     any      6.0.5 build 109488 or later
Workstation    5.x       any      5.5.8 build 108000 or later

Player         2.5.x     any      not affected
Player         2.0.x     any      2.0.5 build 109488 or later
Player         1.x       any      1.0.8 build  or later

ACE            2.5.x     Windows  not affected
ACE            2.0.x     Windows  not affected
ACE            1.x       Windows  not affected

Server         2.x       any      not affected
Server         1.x       any      1.0.7 build 108231 or later

Fusion         2.x       Mac OS/X not affected
Fusion         1.x       Mac OS/X not affected

ESXi           3.5       ESXi     ESXe350-200809401-I-SG

ESX            3.5       ESX      ESX350-200809404-SG
ESX            3.0.3     ESX      ESX303-200809401
ESX            3.0.2     ESX      ESX-1006361
ESX            3.0.1     ESX      ESX-1006678
ESX            2.5.5     ESX      not affected
ESX            2.5.4     ESX      not affected

NOTE: The set of guest operating systems which is affected by
      this issue is a subset of 64-bit operating systems
      &#40;see above for details&#41;

    The currently installed version of JRE depends on your patch
    deployment history.

VMSA-2008-0016 VMware Hosted products, VirtualCenter Update 3 and patches for ESX and ESXi resolve multiple security issues

VirtualCenter

VMware Workstation 6.0.5

VMware Workstation 5.5.8

VMware Player 2.0.5 and 1.0.8

VMware ACE 2.0.5

VMware ACE 1.0.7

VMware Server 1.0.7

ESXi

ESX

VMSA-2008-0016 VMware Hosted products, VirtualCenter Update 3 and patches for ESX and ESXi resolve multiple security issues

VirtualCenter

VMware Workstation 6.0.5

VMware Workstation 5.5.8

VMware Player 2.0.5 and 1.0.8

VMware ACE 2.0.5

VMware ACE 1.0.7

VMware Server 1.0.7

ESXi

ESX

Related