CVE-2007-0063
Integer underflow in the DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Player 2 before 2.0.1 Build 55017, ACE before 1.0.3 Build 54075 and ACE 2 before 2.0.1 Build…
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 20.4%, higher than 97% of all known CVEs. Patch or mitigate before the next change window.
Description
Integer underflow in the DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Player 2 before 2.0.1 Build 55017, ACE before 1.0.3 Build 54075 and ACE 2 before 2.0.1 Build 55017, and Server before 1.0.4 Build 56528 allows remote attackers to execute arbitrary code via a malformed DHCP packet that triggers a stack-based buffer overflow.
- CVSS 2.0
- 10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C
- EPSS
- 20.41% probability · 97th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-191
- Affected
- vmware/ace · vmware/player · vmware/server · vmware/workstation · vmware/esx · canonical/ubuntu linux
- Source
- cve@mitre.org
References
- http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.htmlThird Party Advisory
- http://secunia.com/advisories/26890Third Party Advisory
- http://secunia.com/advisories/27694Third Party Advisory
- http://secunia.com/advisories/27706Third Party Advisory
- http://security.gentoo.org/glsa/glsa-200711-23.xmlThird Party Advisory
- http://www.iss.net/threats/275.htmlPatch, Third Party Advisory
- http://www.securityfocus.com/bid/25729Patch, Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id?1018717Third Party Advisory, VDB Entry
- http://www.ubuntu.com/usn/usn-543-1Third Party Advisory
- http://www.vmware.com/support/ace/doc/releasenotes_ace.htmlPatch, Vendor Advisory
- http://www.vmware.com/support/ace2/doc/releasenotes_ace2.htmlPatch, Vendor Advisory
- http://www.vmware.com/support/player/doc/releasenotes_player.htmlPatch, Vendor Advisory
- http://www.vmware.com/support/player2/doc/releasenotes_player2.htmlPatch, Vendor Advisory
- http://www.vmware.com/support/server/doc/releasenotes_server.htmlPatch, Vendor Advisory
- http://www.vmware.com/support/ws55/doc/releasenotes_ws55.htmlPatch, Vendor Advisory
- http://www.vmware.com/support/ws6/doc/releasenotes_ws6.htmlPatch, Vendor Advisory
- http://www.vupen.com/english/advisories/2007/3229Third Party Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33103Third Party Advisory, VDB Entry
- http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.htmlThird Party Advisory
- http://secunia.com/advisories/26890Third Party Advisory
- http://secunia.com/advisories/27694Third Party Advisory
- http://secunia.com/advisories/27706Third Party Advisory
- http://security.gentoo.org/glsa/glsa-200711-23.xmlThird Party Advisory
- http://www.iss.net/threats/275.htmlPatch, Third Party Advisory
- http://www.securityfocus.com/bid/25729Patch, Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id?1018717Third Party Advisory, VDB Entry
- http://www.ubuntu.com/usn/usn-543-1Third Party Advisory
- http://www.vmware.com/support/ace/doc/releasenotes_ace.htmlPatch, Vendor Advisory
- http://www.vmware.com/support/ace2/doc/releasenotes_ace2.htmlPatch, Vendor Advisory
- http://www.vmware.com/support/player/doc/releasenotes_player.htmlPatch, Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.