CVE-2007-1337

VMware Workstation 5.5.x before 5.5.4 is affected by CVE-2007-1337 where the VMX component fails to read ACPI sleep (S2) state correctly when returning to run state, enabling a DoS that can reboot the guest VM. Connected advisories also document related CVEs and patches; the primary fix is VMware...

CVE-2007-1877

VMware Workstation before 5.5.4 allows attackers to cause a denial of service against the guest OS by causing the virtual machine process VMX to store malformed configuration information...

CVE-2007-1876

CVE-2007-1876 affects VMware Workstation prior to 5.5.4. In a 64-bit Windows guest on a 64-bit host, debugging a local program and stepping into a syscall instruction could corrupt the virtual machine’s register context, leading to system instability or VM/process failures. The issue is described...

CVE-2007-1744

CVE-2007-1744 is a VMware Workstation/Player/ACE Shared Folders directory traversal vulnerability. A guest user can write to arbitrary host files via the Backdoor I/O Port if Shared Folders is enabled and at least one host folder is shared. Root cause: PathName is converted to Unicode with UTF-8 ...

CVE-2007-1744

Directory traversal vulnerability in the Shared Folders feature for VMware Workstation before 5.5.4, when a folder is shared, allows users on the guest system to write to arbitrary files on the host system via the "Backdoor I/O Port" interface...

CVE-2007-1337

The virtual machine process VMX in VMware Workstation before 5.5.4 does not properly read state information when moving from the ACPI sleep state to the run state, which allows attackers to cause a denial of service virtual machine reboot via unknown vectors...

CVE-2007-1069

The memory management in VMware Workstation before 5.5.4 allows attackers to cause a denial of service Windows virtual machine crash by triggering certain general protection faults GPF...

CVE-2007-1069

CVE-2007-1069 affects VMware Workstation prior to 5.5.4. According to VMware advisory and related materials, memory management could mishandle general protection faults in Windows guests, enabling denial-of-service by crashing the Windows VM. The issue is among several DoS problems addressed in V...

CVE-2007-1877

CVE-2007-1877 affects VMware Workstation and related VMware products prior to 5.5.4. The issue is a Denial‑of‑Service caused by the VMX process storing malformed configuration data, due to improper handling of configuration information. VMware’s advisory (VMSA-2007-0004) documents affected releas...

iDefense Security Advisory 04.27.07: VMware Workstation Shared Folders Directory Traversal Vulnerability

VMware Workstation Shared Folders Directory Traversal Vulnerability iDefense Security Advisory 04.27.07 http://labs.idefense.com/intelligence/vulnerabilities/ Apr 27, 2007 I. BACKGROUND VMware Workstation is a software virtualization system which allows multiple virtual computers to run on a sing...

VMware Workstation < 5.5.4 Build 44386 Multiple Vulnerabilities

The version of VMware Workstation installed on the remote host is earlier than 5.5.4, Build 44386. Such versions are reportedly affected by several issues, including a directory traversal issue in the application's Shared Folders feature that may allow read or write access from a guest to a host...

krb5 security update

CentOS Errata and Security Advisory CESA-2007:0095-01 Updated krb5 packages that fix a number of issues are now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. Kerberos is a network authentication system which allows clients and...

krb5 security update

CentOS Errata and Security Advisory CESA-2007:0095 Updated krb5 packages that fix a number of issues are now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. Kerberos is a network authentication system which allows clients and servers...

Microsoft Windows Workstation Service NetrWkstaUserEnum Denial of Service (CVE-2006-6723)

Microsoft Windows workstation service routes local file system requests and remote file or print network requests via Remote Procedure Call RPC. A denial of service vulnerability has been reported in the Microsoft Windows Workstation service. A remote attacker can exploit this issue by specially...

Design/Logic Flaw

VMware Workstation 5.5.3 build 34685 does not provide per-user restrictions on certain privileged actions, which allows local users to perform restricted operations such as changing system time, accessing hardware components, and stopping the "VMware tools service" service. NOTE: exploitation is...

CVE-2007-1056

VMware Workstation 5.5.3 build 34685 does not provide per-user restrictions on certain privileged actions, which allows local users to perform restricted operations such as changing system time, accessing hardware components, and stopping the "VMware tools service" service. NOTE: exploitation is...

CVE-2007-1056

VMware Workstation 5.5.3 build 34685 does not provide per-user restrictions on certain privileged actions, which allows local users to perform restricted operations such as changing system time, accessing hardware components, and stopping the "VMware tools service" service. NOTE: exploitation is...

CVE-2007-1056

VMware Workstation 5.5.3 build 34685 does not provide per-user restrictions on certain privileged actions, which allows local users to perform restricted operations such as changing system time, accessing hardware components, and stopping the "VMware tools service" service. NOTE: exploitation is...

CVE-2007-1056

VMware Workstation 5.5.3 build 34685 exposes a local-privilege risk: there are no per-user restrictions for certain privileged actions outside the guest OS. Local users can perform operations such as changing system time, accessing hardware components, and stopping the VMware Tools service by exp...

[Full-disclosure] VMware Workstation multiple denial of service and isolation manipulation vulnerabilities

Suggested severity level: Medium. Type of Risk: Denial of Service, Privilege Elevation, Un-authorize Access. Affected Software: VMware Workstation, version 5.5.3 build 34685 including installation of "VMware Tools" of the same version, in the guest OS. Older versions and other products by the...