CVE-2007-4058

Absolute path traversal vulnerability in a certain ActiveX control in vielib.dll 2.2.5.42958 in EMC VMware 6.0.0 allows remote attackers to execute arbitrary local programs via a full pathname in the first argument to the StartProcess method...

CVE-2007-4058

CVE-2007-4058 is described as an Absolute Path Traversal in the VMware vielib.dll ActiveX (StartProcess) in VMware Workstation/6.0.0, allowing remote execution of arbitrary commands when a user loads attacker-controlled content. Affected component is the vielib.dll ActiveX control; trigger involv...

CVE-2007-4059

CVE-2007-4059 is an absolute path traversal in IntraProcessLogging.dll (Windows) affecting VMware Workstation/Server/Player components. The vulnerability allows a remote attacker to overwrite arbitrary files by supplying a full pathname to the SetLogFileName function in IntraProcessLogging.dll (a...

CVE-2007-4059

Absolute path traversal vulnerability in a certain ActiveX control in IntraProcessLogging.dll 5.5.3.42958 in EMC VMware allows remote attackers to create or overwrite arbitrary files via a full pathname in the argument to the SetLogFileName method...

CVE-2007-4058: Improper Limitation of a Pathname to a Restricted Directory

Absolute path traversal vulnerability in a certain ActiveX control in vielib.dll 2.2.5.42958 in EMC VMware 6.0.0 allows remote attackers to execute arbitrary local programs via a full pathname in the first argument to the StartProcess method...

CVE-2007-4059: Undefined Security Weakness

Absolute path traversal vulnerability in a certain ActiveX control in IntraProcessLogging.dll 5.5.3.42958 in EMC VMware allows remote attackers to create or overwrite arbitrary files via a full pathname in the argument to the SetLogFileName method...

CVE-2007-2491: Undefined Security Weakness

The PIIX4 power management subsystem in EMC VMware Workstation 5.5.3.34685 and VMware Server 1.0.1.29996 allows local users to write to arbitrary memory locations via a crafted poke to I/O port 0x1004, triggering a denial of service virtual machine crash or other unspecified impact, a related iss...

CVE-2006-3547

EMC VMware Player allows user-assisted attackers to cause a denial of service unrecoverable application failure via a long value of the ide1:0.fileName parameter in the .vmx file of a virtual machine. NOTE: third parties have disputed this issue, saying that write access to the .vmx file enables...

CVE-2006-3547

EMC VMware Player allows user-assisted attackers to cause a denial of service unrecoverable application failure via a long value of the ide1:0.fileName parameter in the .vmx file of a virtual machine. NOTE: third parties have disputed this issue, saying that write access to the .vmx file enables...

CVE-2006-3547

EMC VMware Player allows user-assisted attackers to cause a denial of service unrecoverable application failure via a long value of the ide1:0.fileName parameter in the .vmx file of a virtual machine. NOTE: third parties have disputed this issue, saying that write access to the .vmx file enables...

CVE-2006-3547: Undefined Security Weakness

EMC VMware Player allows user-assisted attackers to cause a denial of service unrecoverable application failure via a long value of the ide1:0.fileName parameter in the .vmx file of a virtual machine. NOTE: third parties have disputed this issue, saying that write access to the .vmx file enables...