Login Request a demo
Unscored severity · published Aug 29, 2007
CVE-2007-4591
vstor-ws60.sys in VMWare Workstation 6.0 allows local users to cause a denial of service (host operating system crash) and possibly gain privileges by sending a small file buffer…
–
CVSS
0.4%
EPSS
No
On KEV
Description
vstor-ws60.sys in VMWare Workstation 6.0 allows local users to cause a denial of service (host operating system crash) and possibly gain privileges by sending a small file buffer size value to the FsSetVolumeInformation IOCTL handler with an FsSetFileInformation subcode.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 34% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WO
Workstation · Vmware
6.0 · source: NVD
Affected product
WO
Workstation
Vmware
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-4591
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-4591
marc.info
http://marc.info/?l=bugtraq&m=118805138626360&w=2
Vendor Advisory
http://secunia.com/advisories/26606
tarrysingh.blogspot.com
http://tarrysingh.blogspot.com/2007/08/security-vmware-workstation-6.html
Exploit
http://www.securityfocus.com/bid/25441
www.securitytracker.com
http://www.securitytracker.com/id?1018609
www.vupen.com
http://www.vupen.com/english/advisories/2007/2992
More from Workstation
8.2
CVE-2025-22224
VMware ESXi and Workstation TOCTOU Race Condition Vulnerability
6.0
CVE-2025-22226
VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability
9.9
CVE-2017-4901
The drag-and-drop (DnD) function in VMware Workstation 12.x before version 12.5.4 and Fusion 8.x before version 8.5.5 has an out-of-bounds memory access vulnerability
9.8
CVE-2016-2077
VMware Workstation 11.x before 11.1.3 and VMware Player 7.x before 7.1.3 on Windows incorrectly access an executable file, which allows host OS users to gain host OS privileges…
9.8
CVE-2010-1205
Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in progressive applications, might allow remote attackers to execute arbitrary code via a PNG…