CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2007-5671

HGFS.sys in the VMware Tools package in VMware Workstation 5.x before 5.5.6 build 80404, VMware Player before 1.0.6 build 80404, VMware ACE before 1.0.5 build 79846, VMware Server before 1.0.5 build 80187, and VMware ESX 2.5.4 through 3.0.2 does not properly validate arguments in user-mode METHOD_NEITHER IOCTLs to the \\.\hgfs device, which allows guest OS users to modify arbitrary memory locations in guest kernel memory and gain privileges.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 31.4%

CVSS Severity

CVSS v2 Score 4.4

References

Products affected by CVE-2007-5671

Vmware » Ace » Version: 1.0.0

cpe:2.3:a:vmware:ace:1.0.0
Vmware » Ace » Version: 1.0.1

cpe:2.3:a:vmware:ace:1.0.1
Vmware » Ace » Version: 1.0.2

cpe:2.3:a:vmware:ace:1.0.2
Vmware » Ace » Version: 1.0.3

cpe:2.3:a:vmware:ace:1.0.3
Vmware » Ace » Version: 1.0.4

cpe:2.3:a:vmware:ace:1.0.4
Vmware » Esx Server » Version: 2.5.5

cpe:2.3:a:vmware:esx_server:2.5.5
Vmware » Player » Version: 1.0.4

cpe:2.3:a:vmware:player:1.0.4
Vmware » Server » Version: 1.0.3

cpe:2.3:a:vmware:server:1.0.3
Vmware » Vmware Player » Version: 1.0.0

cpe:2.3:a:vmware:vmware_player:1.0.0
Vmware » Vmware Player » Version: 1.0.1

cpe:2.3:a:vmware:vmware_player:1.0.1
Vmware » Vmware Player » Version: 1.0.2

cpe:2.3:a:vmware:vmware_player:1.0.2
Vmware » Vmware Player » Version: 1.0.3

cpe:2.3:a:vmware:vmware_player:1.0.3
Vmware » Vmware Player » Version: 1.0.5

cpe:2.3:a:vmware:vmware_player:1.0.5
Vmware » Vmware Server » Version: 1.0.0

cpe:2.3:a:vmware:vmware_server:1.0.0
Vmware » Vmware Server » Version: 1.0.1

cpe:2.3:a:vmware:vmware_server:1.0.1
Vmware » Vmware Server » Version: 1.0.2

cpe:2.3:a:vmware:vmware_server:1.0.2
Vmware » Vmware Server » Version: 1.0.4

cpe:2.3:a:vmware:vmware_server:1.0.4
Vmware » Vmware Workstation » Version: 5.5.0

cpe:2.3:a:vmware:vmware_workstation:5.5.0
Vmware » Vmware Workstation » Version: 5.5.2

cpe:2.3:a:vmware:vmware_workstation:5.5.2
Vmware » Vmware Workstation » Version: 5.5.5

cpe:2.3:a:vmware:vmware_workstation:5.5.5
Vmware » Workstation » Version: 5.5.1

cpe:2.3:a:vmware:workstation:5.5.1
Vmware » Workstation » Version: 5.5.3

cpe:2.3:a:vmware:workstation:5.5.3
Vmware » Workstation » Version: 5.5.4

cpe:2.3:a:vmware:workstation:5.5.4
Vmware » Esx » Version: 2.5.4

cpe:2.3:o:vmware:esx:2.5.4
Vmware » Esx » Version: 3.0.0

cpe:2.3:o:vmware:esx:3.0.0
Vmware » Esx » Version: 3.0.1

cpe:2.3:o:vmware:esx:3.0.1
Vmware » Esx » Version: 3.0.2

cpe:2.3:o:vmware:esx:3.0.2

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2007-5671

Products

Pricing

Contact Us