Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2007-0061

The DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Player 2 before 2.0.1 Build 55017, ACE before 1.0.3 Build 54075 and ACE 2 before 2.0.1 Build 55017, and Server before 1.0.4 Build 56528 allows remote attackers to execute arbitrary code via a malformed packet that triggers "corrupt stack memory."

Published

2007-09-21T19:17:00.000

Last Modified

2025-04-09T00:30:58.490

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 10.0 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

10.0

Impact Score

10.0

Weaknesses
  • Type: Primary
    CWE-119
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application vmware ace < 1.0.3 Yes
Application vmware ace < 2.0.1 Yes
Application vmware player < 1.0.5 Yes
Application vmware player < 2.0.1 Yes
Application vmware server < 1.0.4 Yes
Application vmware workstation < 5.5.5 Yes
Application vmware workstation < 6.0.1 Yes
Operating System vmware esx 2.0.2 Yes
Operating System vmware esx 2.1.3 Yes
Operating System vmware esx 2.5.3 Yes
Operating System vmware esx 2.5.4 Yes
Operating System vmware esx 3.0.0 Yes
Operating System vmware esx 3.0.1 Yes
Operating System canonical ubuntu_linux 6.06 Yes
Operating System canonical ubuntu_linux 6.10 Yes
Operating System canonical ubuntu_linux 7.04 Yes
References