1.9
CVE-2007-5438
- EPSS 0.37%
- Veröffentlicht 13.10.2007 01:17:00
- Zuletzt bearbeitet 16.06.2026 22:46:08
- Erkennungen
LoginUnspecified vulnerability in a certain ActiveX control in Reconfig.DLL in VMware Workstation 5.5.x before 5.5.8 build 108000, VMware Workstation 6.0.x before 6.0.5 build 109488, VMware Player 1.x before 1.0.8 build 108000, VMware Player 2.x before 2.0.5 build 109488, VMware ACE 1.x before 1.0.7 build 108880, VMware ACE 2.x before 2.0.5 build 109488, and VMware Server before 1.0.7 build 108231 might allow local users to cause a denial of service to the Virtual Disk Mount Service (vmount2.exe), related to the ConnectPopulatedDiskEx function.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
VMware ≫ Vmware Player Version 1.0.0
VMware ≫ Vmware Player Version 1.0.1
VMware ≫ Vmware Player Version 1.0.2
VMware ≫ Vmware Player Version 1.0.3
VMware ≫ Vmware Player Version 1.0.4
VMware ≫ Vmware Player Version 1.0.5
VMware ≫ Vmware Player Version 1.0.6
VMware ≫ Vmware Player Version 1.0.7
VMware ≫ Vmware Player Version 1.0.8
VMware ≫ Vmware Player Version 2.0
VMware ≫ Vmware Player Version 2.0.1
VMware ≫ Vmware Player Version 2.0.2
VMware ≫ Vmware Player Version 2.0.3
VMware ≫ Vmware Player Version 2.0.4
VMware ≫ Vmware Player Version 2.0.5
VMware ≫ Vmware Server Version <= 1.0.7
VMware ≫ Vmware Server Version 1.0
VMware ≫ Vmware Server Version 1.0.1
VMware ≫ Vmware Server Version 1.0.2
VMware ≫ Vmware Server Version 1.0.3
VMware ≫ Vmware Server Version 1.0.4
VMware ≫ Vmware Server Version 1.0.5
VMware ≫ Vmware Server Version 1.0.6
VMware ≫ Vmware Workstation Version 5.5.0
VMware ≫ Vmware Workstation Version 5.5.1
VMware ≫ Vmware Workstation Version 5.5.2
VMware ≫ Vmware Workstation Version 5.5.3
VMware ≫ Vmware Workstation Version 5.5.4
VMware ≫ Vmware Workstation Version 5.5.5
VMware ≫ Vmware Workstation Version 5.5.6
VMware ≫ Vmware Workstation Version 5.5.7
VMware ≫ Vmware Workstation Version 5.5.8
VMware ≫ Vmware Workstation Version 6.0
VMware ≫ Vmware Workstation Version 6.0.1
VMware ≫ Vmware Workstation Version 6.0.2
VMware ≫ Vmware Workstation Version 6.0.3
VMware ≫ Vmware Workstation Version 6.0.4
VMware ≫ Vmware Workstation Version 6.0.5
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.37% | 0.282 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 1.9 | 3.4 | 2.9 |
AV:L/AC:M/Au:N/C:N/I:N/A:P
|
CWE-20 Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html
http://www.vmware.com/support/player/doc/releasenotes_player.html
http://www.vmware.com/support/player2/doc/releasenotes_player2.html
http://www.vmware.com/support/server/doc/releasenotes_server.html
http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html
http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html
http://www.vmware.com/support/ace/doc/releasenotes_ace.html
http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/064118.html
http://www.securityfocus.com/archive/1/495869/100/0/threaded
http://www.vmware.com/security/advisories/VMSA-2008-0014.html
http://www.vupen.com/english/advisories/2008/2466
http://securityreason.com/securityalert/3219
http://www.securityfocus.com/archive/1/482021/100/0/threaded
http://osvdb.org/43488
http://secunia.com/advisories/31707
http://secunia.com/advisories/31708
http://secunia.com/advisories/31709
http://secunia.com/advisories/31710
http://www.eleytt.com/advisories/eleytt_VMWARE1.pdf
http://www.securityfocus.com/bid/26025
http://www.securitytracker.com/id?1020791