VMWare vulnerabilities

2007-11-1500:00:00

ubuntu.com

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.7

Confidence

High

EPSS

0.291

Percentile

97.0%

JSON

Releases

Ubuntu 7.04
Ubuntu 6.10
Ubuntu 6.06

Packages

linux-restricted-modules-2.6.17 -
linux-restricted-modules-2.6.20 -
vmware-player-kernel-2.6.15 -

Details

Neel Mehta and Ryan Smith discovered that the VMWare Player DHCP server
did not correctly handle certain packet structures. Remote attackers
could send specially crafted packets and gain root privileges.
(CVE-2007-0061, CVE-2007-0062, CVE-2007-0063)

Rafal Wojtczvk discovered multiple memory corruption issues in VMWare
Player. Attackers with administrative privileges in a guest operating
system could cause a denial of service or possibly execute arbitrary
code on the host operating system. (CVE-2007-4496, CVE-2007-4497)

OSVersionArchitecturePackageVersionFilename
Ubuntu7.04noarchvmware-tools-kernel-modules-2.6.20-16< 2.6.20.6-16.30UNKNOWN
Ubuntu7.04noarchavm-fritz-firmware-2.6.20-16< 3.11+2.6.20.6-16.30UNKNOWN
Ubuntu7.04noarchavm-fritz-kernel-source< 3.11+2.6.20.6-16.30UNKNOWN
Ubuntu7.04noarchfglrx-control< 8.34.8+2.6.20.6-16.30UNKNOWN
Ubuntu7.04noarchfglrx-kernel-source< 8.34.8+2.6.20.6-16.30UNKNOWN
Ubuntu7.04noarchlinux-restricted-modules-2.6.20-16-generic< 2.6.20.6-16.30UNKNOWN
Ubuntu7.04noarchlinux-restricted-modules-2.6.20-16-lowlatency< 2.6.20.6-16.30UNKNOWN
Ubuntu7.04noarchnic-restricted-firmware-2.6.20-16-generic-di< 2.6.20.6-16.30UNKNOWN
Ubuntu7.04noarchnic-restricted-modules-2.6.20-16-generic-di< 2.6.20.6-16.30UNKNOWN
Ubuntu7.04noarchnvidia-glx< 1:1.0.9631+2.6.20.6-16.30UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	7.04	noarch	vmware-tools-kernel-modules-2.6.20-16	< 2.6.20.6-16.30	UNKNOWN
Ubuntu	7.04	noarch	avm-fritz-firmware-2.6.20-16	< 3.11+2.6.20.6-16.30	UNKNOWN
Ubuntu	7.04	noarch	avm-fritz-kernel-source	< 3.11+2.6.20.6-16.30	UNKNOWN
Ubuntu	7.04	noarch	fglrx-control	< 8.34.8+2.6.20.6-16.30	UNKNOWN
Ubuntu	7.04	noarch	fglrx-kernel-source	< 8.34.8+2.6.20.6-16.30	UNKNOWN
Ubuntu	7.04	noarch	linux-restricted-modules-2.6.20-16-generic	< 2.6.20.6-16.30	UNKNOWN
Ubuntu	7.04	noarch	linux-restricted-modules-2.6.20-16-lowlatency	< 2.6.20.6-16.30	UNKNOWN
Ubuntu	7.04	noarch	nic-restricted-firmware-2.6.20-16-generic-di	< 2.6.20.6-16.30	UNKNOWN
Ubuntu	7.04	noarch	nic-restricted-modules-2.6.20-16-generic-di	< 2.6.20.6-16.30	UNKNOWN
Ubuntu	7.04	noarch	nvidia-glx	< 1:1.0.9631+2.6.20.6-16.30	UNKNOWN