Lucene search

K
ubuntuUbuntuUSN-543-1
HistoryNov 15, 2007 - 12:00 a.m.

VMWare vulnerabilities

2007-11-1500:00:00
ubuntu.com
29

7.7 High

AI Score

Confidence

High

0.251 Low

EPSS

Percentile

96.7%

Releases

  • Ubuntu 7.04
  • Ubuntu 6.10
  • Ubuntu 6.06

Packages

  • linux-restricted-modules-2.6.17 -
  • linux-restricted-modules-2.6.20 -
  • vmware-player-kernel-2.6.15 -

Details

Neel Mehta and Ryan Smith discovered that the VMWare Player DHCP server
did not correctly handle certain packet structures. Remote attackers
could send specially crafted packets and gain root privileges.
(CVE-2007-0061, CVE-2007-0062, CVE-2007-0063)

Rafal Wojtczvk discovered multiple memory corruption issues in VMWare
Player. Attackers with administrative privileges in a guest operating
system could cause a denial of service or possibly execute arbitrary
code on the host operating system. (CVE-2007-4496, CVE-2007-4497)