CVE-2007-5618

2007-10-2121:17:00

NVD-CWE-noinfo

[email protected]

web.nvd.nist.gov

cve-2007-5618

nvd

vmware

windows

search path vulnerability

local users

privileges

malicious programs

6.5 Medium

AI Score

Confidence

Low

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

18.9%

JSON

Unquoted Windows search path vulnerability in the Authorization and other services in VMware Player 1.0.x before 1.0.5 and 2.0 before 2.0.1, VMware Server before 1.0.4, and Workstation 5.x before 5.5.5 and 6.x before 6.0.1 might allow local users to gain privileges via malicious programs.

CPENameOperatorVersion
vmware:playervmware playerlt1.0.5
vmware:workstationvmware workstationlt5.5.5
vmware:workstationvmware workstationlt6.0.1
vmware:playervmware playerlt2.0.1
vmware:servervmware serverlt1.0.4

CPE	Name	Operator	Version
vmware:player	vmware player	lt	1.0.5
vmware:workstation	vmware workstation	lt	5.5.5
vmware:workstation	vmware workstation	lt	6.0.1
vmware:player	vmware player	lt	2.0.1
vmware:server	vmware server	lt	1.0.4