CVE-2007-5618

2007-10-2121:17:00

[email protected]

web.nvd.nist.gov

cve-2007-5618

nvd

vmware

windows

search path vulnerability

local users

privileges

malicious programs

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

9.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.3%

JSON

Unquoted Windows search path vulnerability in the Authorization and other services in VMware Player 1.0.x before 1.0.5 and 2.0 before 2.0.1, VMware Server before 1.0.4, and Workstation 5.x before 5.5.5 and 6.x before 6.0.1 might allow local users to gain privileges via malicious programs.

Affected configurations

NVD

Node

vmwareplayerRange1.0.0–1.0.5

vmwareplayerRange2.0–2.0.1

vmwareserverRange<1.0.4

vmwareworkstationRange5.5–5.5.5

vmwareworkstationRange6.0–6.0.1

CPENameOperatorVersion
vmware:playervmware playerlt1.0.5
vmware:playervmware playerlt2.0.1
vmware:servervmware serverlt1.0.4
vmware:workstationvmware workstationlt5.5.5
vmware:workstationvmware workstationlt6.0.1

CPE	Name	Operator	Version
vmware:player	vmware player	lt	1.0.5
vmware:player	vmware player	lt	2.0.1
vmware:server	vmware server	lt	1.0.4
vmware:workstation	vmware workstation	lt	5.5.5
vmware:workstation	vmware workstation	lt	6.0.1