Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Buy Us a Coffee

CVE-2008-3695

Quick assessment

Affected

n/a n/a

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

VMWare是一款虚拟PC软件，允许在一台机器上同时运行两个或多个Windows、DOS、LINUX系统。 VMware Workstation 5.5.x 5.5.8 build 108000以前版本, VMware Workstation 6.0.x 6.0.5 build 109488以前版本, VMware Player 1.x 1.0.8 build 108000以前版本, VMware Player 2.x 2.0.5 build 109488以前版本, VMware ACE 1.x 1.0.

AI Predicted 7.8 Difficulty: Easy EPSS 3.56% · P88 Updated Feb 21, 2026

Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2008-3695

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

N/A

Source: CVE Program / CVE List V5

Vulnerability Description

Unspecified vulnerability in a certain ActiveX control in VMware Workstation 5.5.x before 5.5.8 build 108000, VMware Workstation 6.0.x before 6.0.5 build 109488, VMware Player 1.x before 1.0.8 build 108000, VMware Player 2.x before 2.0.5 build 109488, VMware ACE 1.x before 1.0.7 build 108880, VMware ACE 2.x before 2.0.5 build 109488, and VMware Server before 1.0.7 build 108231 has unknown impact and remote attack vectors, a different vulnerability than CVE-2008-3691, CVE-2008-3692, CVE-2008-3693, CVE-2008-3694, and CVE-2008-3696.

Source: CVE Program / CVE List V5

CVSS Information

N/A

Source: CVE Program / CVE List V5

Vulnerability Type

N/A

Source: CVE Program / CVE List V5

Vulnerability Title

Vmware ActiveX 未知攻击漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
-	n/a	n/a	-

II. Public POCs for CVE-2008-3695

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2008-3695

请登录查看更多情报信息。

Vendor Advisories for CVE-2008-3695 (15)

http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html x_refsource_CONFIRM
http://www.vmware.com/support/ace/doc/releasenotes_ace.html x_refsource_CONFIRM
http://www.vmware.com/security/advisories/VMSA-2008-0014.html x_refsource_CONFIRM
http://www.vmware.com/support/player/doc/releasenotes_player.html x_refsource_CONFIRM
http://www.vmware.com/support/server/doc/releasenotes_server.html x_refsource_CONFIRM
http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html x_refsource_CONFIRM
http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html x_refsource_CONFIRM
http://www.securityfocus.com/bid/30934 vdb-entry x_refsource_BID
http://secunia.com/advisories/31707 third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/31710 third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/31709 third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/31708 third-party-advisory x_refsource_SECUNIA
http://www.securitytracker.com/id?1020791 vdb-entry x_refsource_SECTRACK
http://www.vupen.com/english/advisories/2008/2466 vdb-entry x_refsource_VUPEN
http://www.securityfocus.com/archive/1/495869/100/0/threaded mailing-list x_refsource_BUGTRAQ

Mailing List Discussions for CVE-2008-3695 (1)

http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/064118.html mailing-list x_refsource_FULLDISC

https://www.cve.org/CVERecord?id=CVE-2008-3695

Same Patch Batch · n/a · 2008-09-03 · 28 CVEs total

CVE-2008-3698		Vmware openprocess函数host权限获取漏洞
CVE-2008-3901		Suspend2 Software_suspend_2 信息泄露漏洞
CVE-2008-3900		Intel Bios PE94510M.86A.0050.2007.0710.1559 信息泄露漏洞
CVE-2008-3899		truecrypt_foundation truecrypt 信息泄露漏洞
CVE-2008-3898		Secustar Drivecrypt_plus_pack 信息泄露漏洞
CVE-2008-3897		Freed0m Disckcryptor 信息泄露漏洞
CVE-2008-3896		gnu grub_legacy 信息泄露漏洞
CVE-2008-3895		lilo 信息泄露漏洞
CVE-2008-3894		IBM Lenovo_7cetb5ww 信息泄露漏洞
CVE-2008-3893		Microsoft Bitlocker BIOS 敏感信息泄露漏洞
CVE-2008-3892		Vmware Active X组件缓冲区溢出漏洞
CVE-2008-3891		Google apps SAML Single Sign-On (SSO) 服务欺骗漏洞
CVE-2008-3792		Linux Kernel SCTP模块拒绝服务漏洞
CVE-2008-3791		Lightweight X11 Desktop Environment 任意文件重写漏洞
CVE-2008-1739		Apple quicktime 特制ftyp拒绝服务攻击漏洞
CVE-2008-3697		Vmware ISAPI扩展拒绝服务攻击漏洞
CVE-2008-3696		Vmware ActiveX 未知攻击漏洞
CVE-2008-3694		Vmware ActiveX 未知攻击漏洞
CVE-2008-3693		Vmware ActiveX 未知攻击漏洞
CVE-2008-3692		Vmware ActiveX 未知攻击漏洞

Showing top 20 of 28 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a

Same vendor: n/a

V. Comments for CVE-2008-3695

No comments yet

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2008-3695

Quick assessment

I. Basic Information for CVE-2008-3695

Vulnerability Information

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Affected Products

II. Public POCs for CVE-2008-3695

III. Intelligence Information for CVE-2008-3695

Vendor Advisories for CVE-2008-3695 (15)

Mailing List Discussions for CVE-2008-3695 (1)

Same Patch Batch · n/a · 2008-09-03 · 28 CVEs total

IV. Related Vulnerabilities

V. Comments for CVE-2008-3695

Leave a comment