4.4

CVE-2007-5671

HGFS.sys in the VMware Tools package in VMware Workstation 5.x before 5.5.6 build 80404, VMware Player before 1.0.6 build 80404, VMware ACE before 1.0.5 build 79846, VMware Server before 1.0.5 build 80187, and VMware ESX 2.5.4 through 3.0.2 does not properly validate arguments in user-mode METHOD_NEITHER IOCTLs to the \\.\hgfs device, which allows guest OS users to modify arbitrary memory locations in guest kernel memory and gain privileges.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
VMware ≫ Ace Version 1.0.0
VMware ≫ Ace Version 1.0.1
VMware ≫ Ace Version 1.0.2
VMware ≫ Ace Version 1.0.3
VMware ≫ Ace Version 1.0.4
VMware ≫ Esx Server Version 2.5.5
VMware ≫ Player Version 1.0.4
VMware ≫ Server Version 1.0.3
VMware ≫ Vmware Player Version 1.0.0
VMware ≫ Vmware Player Version 1.0.1
VMware ≫ Vmware Player Version 1.0.2
VMware ≫ Vmware Player Version 1.0.3
VMware ≫ Vmware Player Version 1.0.5
VMware ≫ Vmware Server Version 1.0.0
VMware ≫ Vmware Server Version 1.0.1
VMware ≫ Vmware Server Version 1.0.2
VMware ≫ Vmware Server Version 1.0.4
VMware ≫ Vmware Workstation Version 5.5.0
VMware ≫ Vmware Workstation Version 5.5.2
VMware ≫ Vmware Workstation Version 5.5.5
VMware ≫ Workstation Version 5.5.1
VMware ≫ Workstation Version 5.5.3
VMware ≫ Workstation Version 5.5.4
VMware ≫ Esx Version 2.5.4
VMware ≫ Esx Version 3.0.0
VMware ≫ Esx Version 3.0.1
VMware ≫ Esx Version 3.0.2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.39% 0.304
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.4 3.4 6.4
AV:L/AC:M/Au:N/C:P/I:P/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://www.securityfocus.com/archive/1/493080/100/0/threaded
http://www.vmware.com/security/advisories/VMSA-2008-0009.html
http://www.vupen.com/english/advisories/2008/1744
http://security.gentoo.org/glsa/glsa-201209-25.xml
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=712
http://secunia.com/advisories/30556
Vendor Advisory
http://securityreason.com/securityalert/3922
http://securitytracker.com/id?1020197
http://www.securityfocus.com/archive/1/493148/100/0/threaded
http://www.securityfocus.com/archive/1/493172/100/0/threaded
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5358
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5688