CVE-2007-4059 Absolute path traversal vulnerability in a certain ActiveX control in IntraProcessLogging.dll 5.5.3.42958 in EMC VMware allows remote attackers to create or overwrite arbitrary files via a full pathna...
MediumCVSS 5.8
EPSS 7.2%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Absolute path traversal vulnerability in a certain ActiveX control in IntraProcessLogging.dll 5.5.3.42958 in EMC VMware allows remote attackers to create or overwrite arbitrary files via a full pathname in the argument to the SetLogFileName method.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| VMware Workstation | = 5.5.3-42958 | No fix listed |
References
- 20070920 VMSA-2007-0006 Critical security updates for all supported versions of VMware ESX Server, VMware Server, VMware Workstation, VMware ACE, and VMware Player mailing-list
- 26890 third-party-advisory
- 25110 vdb-entry
- www.vmware.com
- www.vmware.com
- www.vmware.com
- www.vmware.com
- www.vmware.com
- www.vmware.com
- ADV-2007-3229 vdb-entry
- vmware-intraprocesslogging-file-overwrite(35675) vdb-entry
- 4240 exploit