CVE-2007-5438
Unspecified vulnerability in a certain ActiveX control in Reconfig.DLL in VMware Workstation 5.5.x before 5.5.8 build 108000, VMware Workstation 6.0.x before 6.0.5 build 109488, VMware Player 1.x before 1.0.8 build 108000, VMware Player 2.x before 2.0.5…
Does this matter?
Lower severity and a low EPSS score (0.37%). Track it; it rarely justifies an emergency change on its own.
Description
Unspecified vulnerability in a certain ActiveX control in Reconfig.DLL in VMware Workstation 5.5.x before 5.5.8 build 108000, VMware Workstation 6.0.x before 6.0.5 build 109488, VMware Player 1.x before 1.0.8 build 108000, VMware Player 2.x before 2.0.5 build 109488, VMware ACE 1.x before 1.0.7 build 108880, VMware ACE 2.x before 2.0.5 build 109488, and VMware Server before 1.0.7 build 108231 might allow local users to cause a denial of service to the Virtual Disk Mount Service (vmount2.exe), related to the ConnectPopulatedDiskEx function.
- CVSS 2.0
- 1.9 LOWAV:L/AC:M/Au:N/C:N/I:N/A:P
- EPSS
- 0.37% probability · 30th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-20
- Affected
- vmware/ace · vmware/vmware player · vmware/vmware server · vmware/vmware workstation
- Source
- cve@mitre.org
References
- http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/064118.html
- http://osvdb.org/43488
- http://secunia.com/advisories/31707Vendor Advisory
- http://secunia.com/advisories/31708Vendor Advisory
- http://secunia.com/advisories/31709Vendor Advisory
- http://secunia.com/advisories/31710Vendor Advisory
- http://securityreason.com/securityalert/3219
- http://www.eleytt.com/advisories/eleytt_VMWARE1.pdf
- http://www.securityfocus.com/archive/1/482021/100/0/threaded
- http://www.securityfocus.com/archive/1/495869/100/0/threaded
- http://www.securityfocus.com/bid/26025
- http://www.securitytracker.com/id?1020791
- http://www.vmware.com/security/advisories/VMSA-2008-0014.html
- http://www.vmware.com/support/ace/doc/releasenotes_ace.html
- http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html
- http://www.vmware.com/support/player/doc/releasenotes_player.html
- http://www.vmware.com/support/player2/doc/releasenotes_player2.html
- http://www.vmware.com/support/server/doc/releasenotes_server.html
- http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html
- http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html
- http://www.vupen.com/english/advisories/2008/2466Vendor Advisory
- http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/064118.html
- http://osvdb.org/43488
- http://secunia.com/advisories/31707Vendor Advisory
- http://secunia.com/advisories/31708Vendor Advisory
- http://secunia.com/advisories/31709Vendor Advisory
- http://secunia.com/advisories/31710Vendor Advisory
- http://securityreason.com/securityalert/3219
- http://www.eleytt.com/advisories/eleytt_VMWARE1.pdf
- http://www.securityfocus.com/archive/1/482021/100/0/threaded
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.