VMWare vulnerabilities

2007-11-1500:00:00

ubuntu.com

7.7 High

AI Score

Confidence

High

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.254 Low

EPSS

Percentile

96.6%

JSON

Releases

Ubuntu 7.04
Ubuntu 6.10
Ubuntu 6.06

Packages

linux-restricted-modules-2.6.17 -
linux-restricted-modules-2.6.20 -
vmware-player-kernel-2.6.15 -

Details

Neel Mehta and Ryan Smith discovered that the VMWare Player DHCP server
did not correctly handle certain packet structures. Remote attackers
could send specially crafted packets and gain root privileges.
(CVE-2007-0061, CVE-2007-0062, CVE-2007-0063)

Rafal Wojtczvk discovered multiple memory corruption issues in VMWare
Player. Attackers with administrative privileges in a guest operating
system could cause a denial of service or possibly execute arbitrary
code on the host operating system. (CVE-2007-4496, CVE-2007-4497)

OSVersionArchitecturePackageVersionFilename
Ubuntu7.04noarchvmware-tools-kernel-modules-2.6.20-16< 2.6.20.6-16.30UNKNOWN
Ubuntu7.04noarchavm-fritz-firmware-2.6.20-16< 3.11+2.6.20.6-16.30UNKNOWN
Ubuntu7.04noarchavm-fritz-kernel-source< 3.11+2.6.20.6-16.30UNKNOWN
Ubuntu7.04noarchfglrx-control< 8.34.8+2.6.20.6-16.30UNKNOWN
Ubuntu7.04noarchfglrx-kernel-source< 8.34.8+2.6.20.6-16.30UNKNOWN
Ubuntu7.04noarchlinux-restricted-modules-2.6.20-16-generic< 2.6.20.6-16.30UNKNOWN
Ubuntu7.04noarchlinux-restricted-modules-2.6.20-16-lowlatency< 2.6.20.6-16.30UNKNOWN
Ubuntu7.04noarchnic-restricted-firmware-2.6.20-16-generic-di< 2.6.20.6-16.30UNKNOWN
Ubuntu7.04noarchnic-restricted-modules-2.6.20-16-generic-di< 2.6.20.6-16.30UNKNOWN
Ubuntu7.04noarchnvidia-glx< 1:1.0.9631+2.6.20.6-16.30UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	7.04	noarch	vmware-tools-kernel-modules-2.6.20-16	< 2.6.20.6-16.30	UNKNOWN
Ubuntu	7.04	noarch	avm-fritz-firmware-2.6.20-16	< 3.11+2.6.20.6-16.30	UNKNOWN
Ubuntu	7.04	noarch	avm-fritz-kernel-source	< 3.11+2.6.20.6-16.30	UNKNOWN
Ubuntu	7.04	noarch	fglrx-control	< 8.34.8+2.6.20.6-16.30	UNKNOWN
Ubuntu	7.04	noarch	fglrx-kernel-source	< 8.34.8+2.6.20.6-16.30	UNKNOWN
Ubuntu	7.04	noarch	linux-restricted-modules-2.6.20-16-generic	< 2.6.20.6-16.30	UNKNOWN
Ubuntu	7.04	noarch	linux-restricted-modules-2.6.20-16-lowlatency	< 2.6.20.6-16.30	UNKNOWN
Ubuntu	7.04	noarch	nic-restricted-firmware-2.6.20-16-generic-di	< 2.6.20.6-16.30	UNKNOWN
Ubuntu	7.04	noarch	nic-restricted-modules-2.6.20-16-generic-di	< 2.6.20.6-16.30	UNKNOWN
Ubuntu	7.04	noarch	nvidia-glx	< 1:1.0.9631+2.6.20.6-16.30	UNKNOWN