Unscored severity · published May 2, 2007
CVE-2007-1744
Directory traversal vulnerability in the Shared Folders feature for VMware Workstation before 5.5.4, when a folder is shared, allows users on the guest system to write to…
–
CVSS
0.4%
EPSS
No
On KEV
Description
Directory traversal vulnerability in the Shared Folders feature for VMware Workstation before 5.5.4, when a folder is shared, allows users on the guest system to write to arbitrary files on the host system via the "Backdoor I/O Port" interface.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 39% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WO
Workstation · Vmware
through 5.5.3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-1744
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-1744
labs.idefense.com
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=521
secunia.com
http://secunia.com/advisories/25079
www.securityfocus.com
http://www.securityfocus.com/archive/1/467936/30/6690/threaded
www.securityfocus.com
http://www.securityfocus.com/archive/1/469011/30/6510/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/23721
www.securitytracker.com
http://www.securitytracker.com/id?1017980
More from Workstation
8.2
CVE-2025-22224
VMware ESXi and Workstation TOCTOU Race Condition Vulnerability
6.0
CVE-2025-22226
VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability
9.9
CVE-2017-4901
The drag-and-drop (DnD) function in VMware Workstation 12.x before version 12.5.4 and Fusion 8.x before version 8.5.5 has an out-of-bounds memory access vulnerability
9.8
CVE-2016-2077
VMware Workstation 11.x before 11.1.3 and VMware Player 7.x before 7.1.3 on Windows incorrectly access an executable file, which allows host OS users to gain host OS privileges…
9.8
CVE-2010-1205
Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in progressive applications, might allow remote attackers to execute arbitrary code via a PNG…