WO
Product
Workstation
On CISA KEVExploited in the wild
217
CVEs
2
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 5High 55Medium 42Low 4
Watch
Add Workstation to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2007-1337 | – | May 2 | The virtual machine process (VMX) in VMware Workstation before 5.5.4 does not properly read state information when moving from the ACPI sleep state to the run state, which allows… Affected: through 5.5.3 |
| CVE-2007-1069 | – | May 2 | The memory management in VMware Workstation before 5.5.4 allows attackers to cause a denial of service (Windows virtual machine crash) by triggering certain general protection… Affected: through 5.5.3 |
| CVE-2007-1056 | – | Feb 21 | VMware Workstation 5.5.3 build 34685 does not provide per-user restrictions on certain privileged actions, which allows local users to perform restricted operations such as… Affected: 5.5.3_build_34685 |
| CVE-2007-0833 | – | Feb 7 | VMware Workstation 5.5.3 34685, when the "Enable copy and paste to and from this virtual machine" option is enabled, preserves clipboard data on the guest operating system after… Affected: 5.5.3_build_34685 |
| CVE-2007-0832 | – | Feb 7 | VMware Workstation 5.5.3 34685 does not immediately change the availability of a shared clipboard when the "Enable copy and paste to and from this virtual machine" checkbox is… Affected: 5.5.3_build_34685 |
| CVE-2006-6410 | – | Dec 10 | Buffer overflow in an ActiveX control in VMWare 5.5.1 allows local users to execute arbitrary code via a long VmdbDb parameter to the Initialize function Affected: 5.5.1 |
| CVE-2006-3589 | – | Jul 21 | vmware-config.pl in VMware for Linux, ESX Server 2.x, and Infrastructure 3 does not check the return code from a Perl chmod function call, which might cause an SSL key file to be… Affected: 5.5.3 |
| CVE-2005-4459 | – | Dec 21 | Heap-based buffer overflow in the NAT networking components vmnat.exe and vmnet-natd in VMWare Workstation 5.5, GSX Server 3.2, ACE 1.0.1, and Player 1.0 allows remote… Affected: 3.2.1; 3.4; 4.0; 4.0.1; 4.0.2; 4.5.2; +3 more |
| CVE-2005-2939 | – | Nov 18 | Unquoted Windows search path vulnerability in VMWare Workstation 5.0.0 build-13124 might allow local users to gain privileges via a malicious "program.exe" file in the C: folder Affected: 5.0.0_build_13124 |
| CVE-2005-0444 | – | Feb 14 | VMware before 4.5.2.8848-r5 searches for gdk-pixbuf shared libraries using a path that includes the rrdharan world-writable temporary directory, which allows local users to… Affected: through 4.5.2_build_8848 |
| CVE-2004-2515 | – | Dec 31 | Format string vulnerability in VMware Workstation 4.5.2 build-8848, if running with elevated privileges, might allow local users to execute arbitrary code via format string… Affected: 4.5.2_build_8848 |
| CVE-2003-0739 | – | Oct 20 | VMware Workstation 4.0.1 for Linux, build 5289 and earlier, allows local users to delete arbitrary files via a symlink attack Affected: through 4.0.1_build_5289 |
| CVE-2003-0631 | – | Aug 27 | VMware GSX Server 2.5.1 build 4968 and earlier, and Workstation 4.0 and earlier, allows local users to gain root privileges via certain enivronment variables that are used when… Affected: 4.0 |
| CVE-2003-0480 | – | Aug 7 | VMware Workstation 4.0 for Linux allows local users to overwrite arbitrary files and gain privileges via "symlink manipulation." Affected: 4.0 |
| CVE-2001-1059 | – | Jul 30 | VMWare creates a temporary file vmware-log.USERNAME with insecure permissions, which allows local users to read or modify license information Affected: 2.0 |
| CVE-2000-0090 | – | Jan 17 | VMWare 1.1.2 allows local users to cause a denial of service via a symlink attack Affected: 1.0.1; 1.0.2; 1.1; 1.1.1; 1.1.2 |
| CVE-1999-0733 | – | Jun 26 | Buffer overflow in VMWare 1.0.1 for Linux via a long HOME environmental variable Affected: 1.0.1 |