CVE-2007-0061 The DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Player 2 before 2.0.1 Build 55017, ACE before 1.0.3 Build 54075...
HighCVSS 10.0
EPSS 6.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Player 2 before 2.0.1 Build 55017, ACE before 1.0.3 Build 54075 and ACE 2 before 2.0.1 Build 55017, and Server before 1.0.4 Build 56528 allows remote attackers to execute arbitrary code via a malformed packet that triggers "corrupt stack memory."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| VMware ace | >= 1.0, < 1.0.3 | 1.0.3 |
| VMware ace | >= 2.0, < 2.0.1 | 2.0.1 |
| VMware player | >= 1.0, < 1.0.5 | 1.0.5 |
| VMware player | >= 2.0, < 2.0.1 | 2.0.1 |
| VMware server | >= 1.0, < 1.0.4 | 1.0.4 |
| VMware Workstation | >= 5.5, < 5.5.5 | 5.5.5 |
| VMware Workstation | >= 6.0, < 6.0.1 | 6.0.1 |
| VMware ESX | = 2.0.2 | No fix listed |
| VMware ESX | = 2.1.3 | No fix listed |
| VMware ESX | = 2.5.3 | No fix listed |
| VMware ESX | = 2.5.4 | No fix listed |
| VMware ESX | = 3.0.0 | No fix listed |
| VMware ESX | = 3.0.1 | No fix listed |
| Canonical Ubuntu Linux | = 6.06 | No fix listed |
| Canonical Ubuntu Linux | = 6.10 | No fix listed |
| Canonical Ubuntu Linux | = 7.04 | No fix listed |
References
- 20070920 VMSA-2007-0006 Critical security updates for all supported versions of VMware ESX Server, VMware Server, VMware Workstation, VMware ACE, and VMware Player mailing-list third-party-advisory
- 26890 third-party-advisory
- 27694 third-party-advisory
- 27706 third-party-advisory
- GLSA-200711-23 third-party-advisory vendor-advisory
- 20070919 VMWare DHCP Server Remote Code Execution Vulnerabilities patch third-party-advisory
- 25729 patch third-party-advisory vdb-entry
- 1018717 third-party-advisory vdb-entry
- USN-543-1 third-party-advisory vendor-advisory
- www.vmware.com patch vendor-advisory
- www.vmware.com patch vendor-advisory
- www.vmware.com patch vendor-advisory
- www.vmware.com patch vendor-advisory
- www.vmware.com patch vendor-advisory
- www.vmware.com patch vendor-advisory
- www.vmware.com patch vendor-advisory
- ADV-2007-3229 third-party-advisory vdb-entry
- dhcp-malformed-packet-bo(33101) vdb-entry