Unscored severity · published Oct 13, 2007
CVE-2007-5438
Unspecified vulnerability in a certain ActiveX control in Reconfig.DLL in VMware Workstation 5.5.x before 5.5.8 build 108000, VMware Workstation 6.0.x before 6.0.5 build 109488,…
–
CVSS
0.4%
EPSS
No
On KEV
Description
Unspecified vulnerability in a certain ActiveX control in Reconfig.DLL in VMware Workstation 5.5.x before 5.5.8 build 108000, VMware Workstation 6.0.x before 6.0.5 build 109488, VMware Player 1.x before 1.0.8 build 108000, VMware Player 2.x before 2.0.5 build 109488, VMware ACE 1.x before 1.0.7 build 108880, VMware ACE 2.x before 2.0.5 build 109488, and VMware Server before 1.0.7 build 108231 might allow local users to cause a denial of service to the Virtual Disk Mount Service (vmount2.exe), related to the ConnectPopulatedDiskEx function.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 30% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AC
Ace · Vmware
1.0; 1.0.1; 1.0.2; 1.0.3; 1.0.4; 1.0.5; +8 more · source: NVD
VP
Vmware Player · Vmware
1.0.0; 1.0.1; 1.0.2; 1.0.3; 1.0.4; 1.0.5; +9 more · source: NVD
VS
Vmware Server · Vmware
through 1.0.7; 1.0; 1.0.1; 1.0.2; 1.0.3; 1.0.4; +2 more · source: NVD
VW
Vmware Workstation · Vmware
5.5.0; 5.5.1; 5.5.2; 5.5.3; 5.5.4; 5.5.5; +9 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-5438
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-5438
lists.grok.org.uk
http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/064118.html
osvdb.org
http://osvdb.org/43488
Vendor Advisory
http://secunia.com/advisories/31707
Vendor Advisory
http://secunia.com/advisories/31708
Vendor Advisory
http://secunia.com/advisories/31709
Vendor Advisory
http://secunia.com/advisories/31710
More from Ace
–
CVE-2009-4811
VMware Authentication Daemon 1.0 in vmware-authd.exe in the VMware Authorization Service in VMware Workstation 7.0 before 7.0.1 build 227600 and 6.5.x before 6.5.4 build 246459,…
–
CVE-2010-1142
VMware Tools in VMware Workstation 6.5.x before 6.5.4 build 246459; VMware Player 2.5.x before 2.5.4 build 246459; VMware ACE 2.5.x before 2.5.4 build 246459; VMware Server 2.x…
–
CVE-2010-1141
VMware Tools in VMware Workstation 6.5.x before 6.5.4 build 246459; VMware Player 2.5.x before 2.5.4 build 246459; VMware ACE 2.5.x before 2.5.4 build 246459; VMware Server 2.x…
–
CVE-2010-1138
The virtual networking stack in VMware Workstation 7.0 before 7.0.1 build 227600, VMware Workstation 6.5.x before 6.5.4 build 246459 on Windows, VMware Player 3.0 before 3.0.1…
–
CVE-2009-3732
Format string vulnerability in vmware-vmrc.exe build 158248 in VMware Remote Console (aka VMrc) allows remote attackers to execute arbitrary code via unspecified vectors