CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2009-3707

VMware Authentication Daemon 1.0 in vmware-authd.exe in the VMware Authorization Service in VMware Workstation 7.0 before 7.0.1 build 227600 and 6.5.x before 6.5.4 build 246459, VMware Player 3.0 before 3.0.1 build 227600 and 2.5.x before 2.5.4 build 246459, VMware ACE 2.6 before 2.6.1 build 227600 and 2.5.x before 2.5.4 build 246459, and VMware Server 2.x allows remote attackers to cause a denial of service (process crash) via a \x25\xFF sequence in the USER and PASS commands, related to a "format string DoS" issue. NOTE: some of these details are obtained from third party information.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.169

EPSS Ranking 94.7%

CVSS Severity

CVSS v2 Score 5.0

References

Products affected by CVE-2009-3707

Vmware » Ace » Version: 2.5.0

cpe:2.3:a:vmware:ace:2.5.0
Vmware » Ace » Version: 2.5.1

cpe:2.3:a:vmware:ace:2.5.1
Vmware » Ace » Version: 2.5.2

cpe:2.3:a:vmware:ace:2.5.2
Vmware » Ace » Version: 2.5.3

cpe:2.3:a:vmware:ace:2.5.3
Vmware » Ace » Version: 2.5.4

cpe:2.3:a:vmware:ace:2.5.4
Vmware » Ace » Version: 2.6

cpe:2.3:a:vmware:ace:2.6
Vmware » Ace » Version: 2.6.1

cpe:2.3:a:vmware:ace:2.6.1
Vmware » Player » Version: 2.5

cpe:2.3:a:vmware:player:2.5
Vmware » Player » Version: 2.5.1

cpe:2.3:a:vmware:player:2.5.1
Vmware » Player » Version: 2.5.2

cpe:2.3:a:vmware:player:2.5.2
Vmware » Player » Version: 2.5.3

cpe:2.3:a:vmware:player:2.5.3
Vmware » Player » Version: 2.5.4

cpe:2.3:a:vmware:player:2.5.4
Vmware » Player » Version: 3.0

cpe:2.3:a:vmware:player:3.0
Vmware » Player » Version: 3.0.1

cpe:2.3:a:vmware:player:3.0.1
Vmware » Server » Version: 2.0.0

cpe:2.3:a:vmware:server:2.0.0
Vmware » Server » Version: 2.0.1

cpe:2.3:a:vmware:server:2.0.1
Vmware » Server » Version: 2.0.2

cpe:2.3:a:vmware:server:2.0.2
Vmware » Workstation » Version: 6.5.0

cpe:2.3:a:vmware:workstation:6.5.0
Vmware » Workstation » Version: 6.5.1

cpe:2.3:a:vmware:workstation:6.5.1
Vmware » Workstation » Version: 6.5.2

cpe:2.3:a:vmware:workstation:6.5.2
Vmware » Workstation » Version: 6.5.3

cpe:2.3:a:vmware:workstation:6.5.3
Vmware » Workstation » Version: 6.5.4

cpe:2.3:a:vmware:workstation:6.5.4
Vmware » Workstation » Version: 7.0

cpe:2.3:a:vmware:workstation:7.0
Vmware » Workstation » Version: 7.0.1

cpe:2.3:a:vmware:workstation:7.0.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2009-3707

Products

Pricing

Contact Us