Unscored severity · published Sep 21, 2007
CVE-2007-0062
Integer overflow in the ISC dhcpd 3.0.x before 3.0.7 and 3.1.x before 3.1.1; and the DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build…
–
CVSS
7.6%
EPSS
No
On KEV
Description
Integer overflow in the ISC dhcpd 3.0.x before 3.0.7 and 3.1.x before 3.1.1; and the DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Player 2 before 2.0.1 Build 55017, ACE before 1.0.3 Build 54075 and ACE 2 before 2.0.1 Build 55017, and Server before 1.0.4 Build 56528; allows remote attackers to cause a denial of service (daemon crash) or execute arbitrary code via a malformed DHCP packet with a large dhcp-max-message-size that triggers a stack-based buffer overflow, related to servers configured to send many DHCP options to clients.
Exploitation
Is it being used?
Exploit prediction (EPSS)7.6% · higher than 95% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AC
Ace · Vmware
1.0.3; 2.0 · source: NVD
PL
Player · Vmware
1.0.4; 2.0 · source: NVD
SE
Server · Vmware
1.0.3 · source: NVD
VW
Vmware Workstation · Vmware
6.0.1 · source: NVD
WO
Workstation · Vmware
3.4; 4.0; 4.0.1; 4.0.2; 4.5.2; 5.5.0_build_13124; +7 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-0062
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-0062
bugs.gentoo.org
http://bugs.gentoo.org/show_bug.cgi?id=227135
lists.grok.org.uk
http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00000.html
Vendor Advisory
http://secunia.com/advisories/26890
Vendor Advisory
http://secunia.com/advisories/27694
Vendor Advisory
http://secunia.com/advisories/27706
More from Ace
–
CVE-2009-4811
VMware Authentication Daemon 1.0 in vmware-authd.exe in the VMware Authorization Service in VMware Workstation 7.0 before 7.0.1 build 227600 and 6.5.x before 6.5.4 build 246459,…
–
CVE-2010-1142
VMware Tools in VMware Workstation 6.5.x before 6.5.4 build 246459; VMware Player 2.5.x before 2.5.4 build 246459; VMware ACE 2.5.x before 2.5.4 build 246459; VMware Server 2.x…
–
CVE-2010-1141
VMware Tools in VMware Workstation 6.5.x before 6.5.4 build 246459; VMware Player 2.5.x before 2.5.4 build 246459; VMware ACE 2.5.x before 2.5.4 build 246459; VMware Server 2.x…
–
CVE-2010-1138
The virtual networking stack in VMware Workstation 7.0 before 7.0.1 build 227600, VMware Workstation 6.5.x before 6.5.4 build 246459 on Windows, VMware Player 3.0 before 3.0.1…
–
CVE-2009-3732
Format string vulnerability in vmware-vmrc.exe build 158248 in VMware Remote Console (aka VMrc) allows remote attackers to execute arbitrary code via unspecified vectors