Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2007-5671
HistoryJun 05, 2008 - 8:32 p.m.

CVE-2007-5671

2008-06-0520:32:00
CWE-20
[email protected]
web.nvd.nist.gov

4.4 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

7.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.7%

JSON

HGFS.sys in the VMware Tools package in VMware Workstation 5.x before 5.5.6 build 80404, VMware Player before 1.0.6 build 80404, VMware ACE before 1.0.5 build 79846, VMware Server before 1.0.5 build 80187, and VMware ESX 2.5.4 through 3.0.2 does not properly validate arguments in user-mode METHOD_NEITHER IOCTLs to the \.\hgfs device, which allows guest OS users to modify arbitrary memory locations in guest kernel memory and gain privileges.

Affected configurations

NVD
Node
vmwareaceMatch1.0.0
OR
vmwareaceMatch1.0.1
OR
vmwareaceMatch1.0.2
OR
vmwareaceMatch1.0.3
OR
vmwareaceMatch1.0.4
OR
vmwareesx_serverMatch2.5.5
OR
vmwareplayerMatch1.0.4
OR
vmwareserverMatch1.0.3
OR
vmwarevmware_playerMatch1.0.0
OR
vmwarevmware_playerMatch1.0.1
OR
vmwarevmware_playerMatch1.0.2
OR
vmwarevmware_playerMatch1.0.3
OR
vmwarevmware_playerMatch1.0.5
OR
vmwarevmware_serverMatch1.0.0
OR
vmwarevmware_serverMatch1.0.1
OR
vmwarevmware_serverMatch1.0.2
OR
vmwarevmware_serverMatch1.0.4
OR
vmwarevmware_workstationMatch5.5.0
OR
vmwarevmware_workstationMatch5.5.2
OR
vmwarevmware_workstationMatch5.5.5
OR
vmwareworkstationMatch5.5.1
OR
vmwareworkstationMatch5.5.3
OR
vmwareworkstationMatch5.5.4
OR
vmwareesxMatch2.5.4
OR
vmwareesxMatch3.0.0
OR
vmwareesxMatch3.0.1
OR
vmwareesxMatch3.0.2

Related

openvas 6
prion 1
ubuntucve 1
cve 1
cvelist 1
nessus 3
securityvulns 2
vmware 2
gentoo 1
openvas
openvas
VMware Tools Local Privilege Escalation Vulnerability (Linux)
2008-09-26 00:00:00
VMware Tools Local Privilege Escalation Vulnerability (VMSA-2008-0009) - Windows
2008-09-26 00:00:00
VMware Tools Local Privilege Escalation Vulnerability (VMSA-2008-0009) - Linux
2008-09-26 00:00:00
prion
prion
Memory corruption
2008-06-05 20:32:00
ubuntucve
ubuntucve
CVE-2007-5671
2008-06-05 00:00:00
cve
cve
CVE-2007-5671
2008-06-05 20:32:00
cvelist
cvelist
CVE-2007-5671
2008-06-05 20:21:00
nessus
nessus
VMware Products Multiple Vulnerabilities (VMSA-2008-0009)
2008-06-09 00:00:00
VMSA-2008-0009 : Updates to VMware Workstation, VMware Player, VMware ACE, VMware Fusion, VMware Server, VMware VIX API, VMware ESX, VMware ESXi resolve critical security issues
2009-07-27 00:00:00
GLSA-201209-25 : VMware Player, Server, Workstation: Multiple vulnerabilities
2012-10-01 00:00:00
securityvulns
securityvulns
VMWare multiple security vulnerabilities
2008-06-06 00:00:00
VMSA-2008-0009 Updates to VMware Workstation, VMware Player, VMware ACE, VMware Fusion, VMware Server, VMware VIX API, VMware ESX, VMware ESXi resolve critical security issues
2008-06-05 00:00:00
vmware
vmware
Updates to VMware Workstation, VMware Player, VMware ACE, VMware Fusion, VMware Server, VMware VIX API, VMware ESX, VMware ESXi resolve critical security issues
2008-06-04 00:00:00
Updates to VMware Workstation, VMware Player, VMware ACE, VMware Fusion, VMware Server, VMware VIX API, VMware ESX, VMware ESXi resolve critical security issues
2008-06-04 00:00:00
gentoo
gentoo
VMware Player, Server, Workstation: Multiple vulnerabilities
2012-09-29 00:00:00

4.4 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

7.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.7%

JSON
Related for NVD:CVE-2007-5671
openvas6prion1ubuntucve1cve1cvelist1nessus3securityvulns2vmware2gentoo1