Unscored severity · published Jun 5, 2008
CVE-2007-5671
HGFS.sys in the VMware Tools package in VMware Workstation 5.x before 5.5.6 build 80404, VMware Player before 1.0.6 build 80404, VMware ACE before 1.0.5 build 79846, VMware Server…
–
CVSS
0.4%
EPSS
No
On KEV
Description
HGFS.sys in the VMware Tools package in VMware Workstation 5.x before 5.5.6 build 80404, VMware Player before 1.0.6 build 80404, VMware ACE before 1.0.5 build 79846, VMware Server before 1.0.5 build 80187, and VMware ESX 2.5.4 through 3.0.2 does not properly validate arguments in user-mode METHOD_NEITHER IOCTLs to the \\.\hgfs device, which allows guest OS users to modify arbitrary memory locations in guest kernel memory and gain privileges.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 33% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AC
Ace · Vmware
1.0.0; 1.0.1; 1.0.2; 1.0.3; 1.0.4 · source: NVD
ES
Esx · Vmware
2.5.4; 3.0.0; 3.0.1; 3.0.2 · source: NVD
ES
Esx Server · Vmware
2.5.5 · source: NVD
PL
Player · Vmware
1.0.4 · source: NVD
SE
Server · Vmware
1.0.3 · source: NVD
VP
Vmware Player · Vmware
1.0.0; 1.0.1; 1.0.2; 1.0.3; 1.0.5 · source: NVD
VS
Vmware Server · Vmware
1.0.0; 1.0.1; 1.0.2; 1.0.4 · source: NVD
VW
Vmware Workstation · Vmware
5.5.0; 5.5.2; 5.5.5 · source: NVD
WO
Workstation · Vmware
5.5.1; 5.5.3; 5.5.4 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-5671
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-5671
labs.idefense.com
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=712
Vendor Advisory
http://secunia.com/advisories/30556
security.gentoo.org
http://security.gentoo.org/glsa/glsa-201209-25.xml
securityreason.com
http://securityreason.com/securityalert/3922
securitytracker.com
http://securitytracker.com/id?1020197
www.securityfocus.com
http://www.securityfocus.com/archive/1/493080/100/0/threaded
More from Ace
–
CVE-2009-4811
VMware Authentication Daemon 1.0 in vmware-authd.exe in the VMware Authorization Service in VMware Workstation 7.0 before 7.0.1 build 227600 and 6.5.x before 6.5.4 build 246459,…
–
CVE-2010-1142
VMware Tools in VMware Workstation 6.5.x before 6.5.4 build 246459; VMware Player 2.5.x before 2.5.4 build 246459; VMware ACE 2.5.x before 2.5.4 build 246459; VMware Server 2.x…
–
CVE-2010-1141
VMware Tools in VMware Workstation 6.5.x before 6.5.4 build 246459; VMware Player 2.5.x before 2.5.4 build 246459; VMware ACE 2.5.x before 2.5.4 build 246459; VMware Server 2.x…
–
CVE-2010-1138
The virtual networking stack in VMware Workstation 7.0 before 7.0.1 build 227600, VMware Workstation 6.5.x before 6.5.4 build 246459 on Windows, VMware Player 3.0 before 3.0.1…
–
CVE-2009-3732
Format string vulnerability in vmware-vmrc.exe build 158248 in VMware Remote Console (aka VMrc) allows remote attackers to execute arbitrary code via unspecified vectors