Design/Logic Flaw

The DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Player 2 before 2.0.1 Build 55017, ACE before 1.0.3 Build 54075 and ACE 2 before 2.0.1 Build 55017, and Server before 1.0.4 Build 56528 allows remote attackers ...

CVE-2007-4497

Unspecified vulnerability in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Player 2 before 2.0.1 Build 55017, ACE before 1.0.3 Build 54075 and ACE 2 before 2.0.1 Build 55017, and Server before 1.0.4 Build 56528 allows users...

CVE-2007-0062

CVE-2007-0062: The vulnerability affects ISC DHCPD 3.0.x (before 3.0.7) and 3.1.x (before 3.1.1), plus the DHCP servers in VMware Workstation/Player, ACE, and related products. It is caused by a stack-based buffer overflow triggered by a malformed DHCP packet with a large dhcp-max-message-size, p...

CVE-2007-0062

Integer overflow in the ISC dhcpd 3.0.x before 3.0.7 and 3.1.x before 3.1.1; and the DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Player 2 before 2.0.1 Build 55017, ACE before 1.0.3 Build 54075 and ACE 2 befor...

CVE-2007-4496

The CVE-2007-4496 issue affects VMware products: VMware Workstation (before 5.5.5.56455), VMware Player (before 1.0.5.56455 and Player 2 before 2.0.1 55017), ACE (before 1.0.3.54075 and ACE 2 before 2.0.1 55017), and VMware Server (before 1.0.4 56528). It allows an authenticated guest OS user wit...

CVE-2007-5023

CVE-2007-5023 describes an unquoted Windows search path vulnerability that could allow local users to gain privileges in EMC VMware products. Affected are VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, VMware Player before 1.0.5 Build 56455 and Player 2 before 2.0.1...

Sql injection

Unspecified vulnerability in vstor2-ws60.sys in VMWare Workstation 6.0 allows local users to cause a denial of service host operating system crash via unspecified vectors, as demonstrated by the DC2 test suite, possibly a related issue to CVE-2007-4591. NOTE: the provenance of this information is...

CVE-2007-4593

Unspecified vulnerability in vstor2-ws60.sys in VMWare Workstation 6.0 allows local users to cause a denial of service host operating system crash via unspecified vectors, as demonstrated by the DC2 test suite, possibly a related issue to CVE-2007-4591. NOTE: the provenance of this information is...

CVE-2007-4593

Unspecified vulnerability in vstor2-ws60.sys in VMWare Workstation 6.0 allows local users to cause a denial of service host operating system crash via unspecified vectors, as demonstrated by the DC2 test suite, possibly a related issue to CVE-2007-4591. NOTE: the provenance of this information is...

CVE-2007-4591

CVE-2007-4591 concerns a local denial of service (host OS crash) and potential privilege escalation in VMware Workstation 6.0. The issue is tied to the driver vstor-ws60.sys; by sending a small file buffer size value to the FsSetVolumeInformation IOCTL handler with an FsSetFileInformation subcode...

Design/Logic Flaw

The PIIX4 power management subsystem in EMC VMware Workstation 5.5.3.34685 and VMware Server 1.0.1.29996 allows local users to write to arbitrary memory locations via a crafted poke to I/O port 0x1004, triggering a denial of service virtual machine crash or other unspecified impact, a related iss...

Information disclosure

VMware Workstation before 5.5.4 allows attackers to cause a denial of service against the guest OS by causing the virtual machine process VMX to store malformed configuration information...

Memory corruption

The memory management in VMware Workstation before 5.5.4 allows attackers to cause a denial of service Windows virtual machine crash by triggering certain general protection faults GPF...

CVE-2007-1337

The virtual machine process VMX in VMware Workstation before 5.5.4 does not properly read state information when moving from the ACPI sleep state to the run state, which allows attackers to cause a denial of service virtual machine reboot via unknown vectors...

CVE-2007-1744

Directory traversal vulnerability in the Shared Folders feature for VMware Workstation before 5.5.4, when a folder is shared, allows users on the guest system to write to arbitrary files on the host system via the "Backdoor I/O Port" interface...

iDefense Security Advisory 04.27.07: VMware Workstation Shared Folders Directory Traversal Vulnerability

VMware Workstation Shared Folders Directory Traversal Vulnerability iDefense Security Advisory 04.27.07 http://labs.idefense.com/intelligence/vulnerabilities/ Apr 27, 2007 I. BACKGROUND VMware Workstation is a software virtualization system which allows multiple virtual computers to run on a sing...

VMware Workstation < 5.5.4 Build 44386 Multiple Vulnerabilities

The version of VMware Workstation installed on the remote host is earlier than 5.5.4, Build 44386. Such versions are reportedly affected by several issues, including a directory traversal issue in the application's Shared Folders feature that may allow read or write access from a guest to a host...

CVE-2007-1056

VMware Workstation 5.5.3 build 34685 does not provide per-user restrictions on certain privileged actions, which allows local users to perform restricted operations such as changing system time, accessing hardware components, and stopping the "VMware tools service" service. NOTE: exploitation is...

Design/Logic Flaw

VMware Workstation 5.5.3 build 34685 does not provide per-user restrictions on certain privileged actions, which allows local users to perform restricted operations such as changing system time, accessing hardware components, and stopping the "VMware tools service" service. NOTE: exploitation is...

CVE-2007-1056

VMware Workstation 5.5.3 build 34685 exposes a local-privilege risk: there are no per-user restrictions for certain privileged actions outside the guest OS. Local users can perform operations such as changing system time, accessing hardware components, and stopping the VMware Tools service by exp...