SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2007-4497

Unspecified vulnerability in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Player 2 before 2.0.1 Build 55017, ACE before 1.0.3 Build 54075 and ACE 2 before 2.0.1 Build 55017, and…

MEDIUM 5.5EPSS 0.83%

Does this matter?

Lower severity and a low EPSS score (0.83%). Track it; it rarely justifies an emergency change on its own.

Description

Unspecified vulnerability in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Player 2 before 2.0.1 Build 55017, ACE before 1.0.3 Build 54075 and ACE 2 before 2.0.1 Build 55017, and Server before 1.0.4 Build 56528 allows users with login access to a guest operating system to cause a denial of service (guest outage and host process crash or hang) via unspecified vectors.

CVSS 2.0
5.5 MEDIUMAV:A/AC:L/Au:S/C:N/I:N/A:C
EPSS
0.83% probability · 55th percentile
CISA KEV
Not listed
Weakness
CWE-264
Affected
vmware/ace · vmware/player · vmware/server · vmware/workstation · canonical/ubuntu linux
Source
cve@mitre.org

References

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.