CVE-2007-4155 Absolute path traversal vulnerability in a certain ActiveX control in vielib.dll in EMC VMware 6.0.0 allows remote attackers to execute arbitrary local programs via a full pathname in the first two ar...
HighCVSS 9.3
EPSS 9.6%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Absolute path traversal vulnerability in a certain ActiveX control in vielib.dll in EMC VMware 6.0.0 allows remote attackers to execute arbitrary local programs via a full pathname in the first two arguments to the (1) CreateProcess or (2) CreateProcessEx method.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| emc vmware | = 6.0.0 | No fix listed |
References
- 20070920 VMSA-2007-0006 Critical security updates for all supported versions of VMware ESX Server, VMware Server, VMware Workstation, VMware ACE, and VMware Player mailing-list
- 26890 third-party-advisory
- 25131 vdb-entry
- 1018511 vdb-entry
- www.vmware.com
- www.vmware.com
- www.vmware.com
- www.vmware.com
- www.vmware.com
- www.vmware.com
- www.vmware.com
- ADV-2007-3229 vdb-entry
- vmware-createprocess-code-execution(35670) vdb-entry
- 4245 exploit