CVE-2007-4496

Severity

65%

Complexity

25%

Confidentiality

165%

Unspecified vulnerability in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Player 2 before 2.0.1 Build 55017, ACE before 1.0.3 Build 54075 and ACE 2 before 2.0.1 Build 55017, and Server before 1.0.4 Build 56528 allows authenticated users with administrative privileges on a guest operating system to corrupt memory and possibly execute arbitrary code on the host operating system via unspecified vectors.

Unspecified vulnerability in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Player 2 before 2.0.1 Build 55017, ACE before 1.0.3 Build 54075 and ACE 2 before 2.0.1 Build 55017, and Server before 1.0.4 Build 56528 allows authenticated users with administrative privileges on a guest operating system to corrupt memory and possibly execute arbitrary code on the host operating system via unspecified vectors.

CVSS 2.0 Base Score 6.5. CVSS Attack Vector: adjacent_network. CVSS Attack Complexity: high. CVSS Vector: (AV:A/AC:H/Au:S/C:C/I:C/A:C).

Overview

First reported 17 years ago

2007-09-21 19:17:00

Last updated 5 years ago

2019-08-01 12:21:00

Affected Software

VMWare ACE

VMWare Player

VMware Server

VMWare VMWare

Canonical Ubuntu Linux 6.06 LTS (Long-Term Support)

6.06

Canonical Ubuntu Linux 6.10

6.10

Canonical Ubuntu Linux 7.04

7.04

References

20070920 VMSA-2007-0006 Critical security updates for all supported versions of VMware ESX Server, VMware Server, VMware Workstation, VMware ACE, and VMware Player

Third Party Advisory

26890

Third Party Advisory

27694

Third Party Advisory

27706

Third Party Advisory

GLSA-200711-23

Third Party Advisory

25728

Patch, Third Party Advisory, VDB Entry

1018718

Third Party Advisory, VDB Entry

USN-543-1

Third Party Advisory

http://www.vmware.com/support/ace/doc/releasenotes_ace.html

Patch, Vendor Advisory

http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html

Patch, Vendor Advisory

http://www.vmware.com/support/player/doc/releasenotes_player.html

Patch, Vendor Advisory

http://www.vmware.com/support/player2/doc/releasenotes_player2.html

Patch, Vendor Advisory

http://www.vmware.com/support/server/doc/releasenotes_server.html

Patch, Vendor Advisory

http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html

Patch, Vendor Advisory

http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html

Patch, Vendor Advisory

ADV-2007-3229

Permissions Required

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.