CVE-2007-1877

CVE-2007-1877 affects VMware Workstation and related VMware products prior to 5.5.4. The issue is a Denial‑of‑Service caused by the VMX process storing malformed configuration data, due to improper handling of configuration information. VMware’s advisory (VMSA-2007-0004) documents affected releas...

CVE-2007-1337

The virtual machine process VMX in VMware Workstation before 5.5.4 does not properly read state information when moving from the ACPI sleep state to the run state, which allows attackers to cause a denial of service virtual machine reboot via unknown vectors...

CVE-2007-1876

CVE-2007-1876 affects VMware Workstation prior to 5.5.4. In a 64-bit Windows guest on a 64-bit host, debugging a local program and stepping into a syscall instruction could corrupt the virtual machine’s register context, leading to system instability or VM/process failures. The issue is described...

CVE-2007-1337

VMware Workstation 5.5.x before 5.5.4 is affected by CVE-2007-1337 where the VMX component fails to read ACPI sleep (S2) state correctly when returning to run state, enabling a DoS that can reboot the guest VM. Connected advisories also document related CVEs and patches; the primary fix is VMware...

iDefense Security Advisory 04.27.07: VMware Workstation Shared Folders Directory Traversal Vulnerability

VMware Workstation Shared Folders Directory Traversal Vulnerability iDefense Security Advisory 04.27.07 http://labs.idefense.com/intelligence/vulnerabilities/ Apr 27, 2007 I. BACKGROUND VMware Workstation is a software virtualization system which allows multiple virtual computers to run on a sing...

VMware Workstation < 5.5.4 Build 44386 Multiple Vulnerabilities

The version of VMware Workstation installed on the remote host is earlier than 5.5.4, Build 44386. Such versions are reportedly affected by several issues, including a directory traversal issue in the application's Shared Folders feature that may allow read or write access from a guest to a host...

krb5 security update

CentOS Errata and Security Advisory CESA-2007:0095-01 Updated krb5 packages that fix a number of issues are now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. Kerberos is a network authentication system which allows clients and...

krb5 security update

CentOS Errata and Security Advisory CESA-2007:0095 Updated krb5 packages that fix a number of issues are now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. Kerberos is a network authentication system which allows clients and servers...

Microsoft Windows Workstation Service NetrWkstaUserEnum Denial of Service (CVE-2006-6723)

Microsoft Windows workstation service routes local file system requests and remote file or print network requests via Remote Procedure Call RPC. A denial of service vulnerability has been reported in the Microsoft Windows Workstation service. A remote attacker can exploit this issue by specially...

CVE-2007-1056

VMware Workstation 5.5.3 build 34685 does not provide per-user restrictions on certain privileged actions, which allows local users to perform restricted operations such as changing system time, accessing hardware components, and stopping the "VMware tools service" service. NOTE: exploitation is...

CVE-2007-1056

VMware Workstation 5.5.3 build 34685 does not provide per-user restrictions on certain privileged actions, which allows local users to perform restricted operations such as changing system time, accessing hardware components, and stopping the "VMware tools service" service. NOTE: exploitation is...

Design/Logic Flaw

VMware Workstation 5.5.3 build 34685 does not provide per-user restrictions on certain privileged actions, which allows local users to perform restricted operations such as changing system time, accessing hardware components, and stopping the "VMware tools service" service. NOTE: exploitation is...

CVE-2007-1056

VMware Workstation 5.5.3 build 34685 exposes a local-privilege risk: there are no per-user restrictions for certain privileged actions outside the guest OS. Local users can perform operations such as changing system time, accessing hardware components, and stopping the VMware Tools service by exp...

CVE-2007-1056

VMware Workstation 5.5.3 build 34685 does not provide per-user restrictions on certain privileged actions, which allows local users to perform restricted operations such as changing system time, accessing hardware components, and stopping the "VMware tools service" service. NOTE: exploitation is...

[Full-disclosure] VMware Workstation multiple denial of service and isolation manipulation vulnerabilities

Suggested severity level: Medium. Type of Risk: Denial of Service, Privilege Elevation, Un-authorize Access. Affected Software: VMware Workstation, version 5.5.3 build 34685 including installation of "VMware Tools" of the same version, in the guest OS. Older versions and other products by the...

Design/Logic Flaw

VMware Workstation 5.5.3 34685 does not immediately change the availability of a shared clipboard when the "Enable copy and paste to and from this virtual machine" checkbox is changed, which allows local users to obtain sensitive information or conduct certain attacks that are facilitated by weak...

CVE-2007-0833

VMware Workstation 5.5.3 34685, when the "Enable copy and paste to and from this virtual machine" option is enabled, preserves clipboard data on the guest operating system after it was deleted on the host operating system, which might allow local users to read clipboard contents by moving the foc...

CVE-2007-0833

VMware Workstation 5.5.3 34685, when the "Enable copy and paste to and from this virtual machine" option is enabled, preserves clipboard data on the guest operating system after it was deleted on the host operating system, which might allow local users to read clipboard contents by moving the foc...

Design/Logic Flaw

VMware Workstation 5.5.3 34685, when the "Enable copy and paste to and from this virtual machine" option is enabled, preserves clipboard data on the guest operating system after it was deleted on the host operating system, which might allow local users to read clipboard contents by moving the foc...

CVE-2007-0832

VMware Workstation 5.5.3 34685 does not immediately change the availability of a shared clipboard when the "Enable copy and paste to and from this virtual machine" checkbox is changed, which allows local users to obtain sensitive information or conduct certain attacks that are facilitated by weak...