CVE-2007-0063 Integer underflow in the DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Player 2 before 2.0.1 Build 55017, ACE bef...
HighCVSS 10.0
EPSS 20.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Integer underflow in the DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Player 2 before 2.0.1 Build 55017, ACE before 1.0.3 Build 54075 and ACE 2 before 2.0.1 Build 55017, and Server before 1.0.4 Build 56528 allows remote attackers to execute arbitrary code via a malformed DHCP packet that triggers a stack-based buffer overflow.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| VMware ace | >= 1.0, < 1.0.3 | 1.0.3 |
| VMware ace | >= 2.0, < 2.0.1 | 2.0.1 |
| VMware player | >= 1.0, < 1.0.5 | 1.0.5 |
| VMware player | >= 2.0, < 2.0.1 | 2.0.1 |
| VMware server | >= 1.0, < 1.0.4 | 1.0.4 |
| VMware Workstation | >= 5.5, < 5.5.5 | 5.5.5 |
| VMware Workstation | >= 6.0, < 6.0.1 | 6.0.1 |
| VMware ESX | = 2.0.2 | No fix listed |
| VMware ESX | = 2.1.3 | No fix listed |
| VMware ESX | = 2.5.3 | No fix listed |
| VMware ESX | = 2.5.4 | No fix listed |
| VMware ESX | = 3.0.0 | No fix listed |
| VMware ESX | = 3.0.1 | No fix listed |
| Canonical Ubuntu Linux | = 6.06 | No fix listed |
| Canonical Ubuntu Linux | = 6.10 | No fix listed |
| Canonical Ubuntu Linux | = 7.04 | No fix listed |
References
- 20070920 VMSA-2007-0006 Critical security updates for all supported versions of VMware ESX Server, VMware Server, VMware Workstation, VMware ACE, and VMware Player mailing-list third-party-advisory
- 26890 third-party-advisory
- 27694 third-party-advisory
- 27706 third-party-advisory
- GLSA-200711-23 third-party-advisory vendor-advisory
- 20070919 VMWare DHCP Server Remote Code Execution Vulnerabilities patch third-party-advisory
- 25729 patch third-party-advisory vdb-entry
- 1018717 third-party-advisory vdb-entry
- USN-543-1 third-party-advisory vendor-advisory
- www.vmware.com patch vendor-advisory
- www.vmware.com patch vendor-advisory
- www.vmware.com patch vendor-advisory
- www.vmware.com patch vendor-advisory
- www.vmware.com patch vendor-advisory
- www.vmware.com patch vendor-advisory
- www.vmware.com patch vendor-advisory
- ADV-2007-3229 third-party-advisory vdb-entry
- dhcp-param-underflow(33103) third-party-advisory vdb-entry