CVE-2007-5671

Опубликовано: 05 июн. 2008

Источник: nvd

CVSS2: 4.4

EPSS Низкий

Описание

HGFS.sys in the VMware Tools package in VMware Workstation 5.x before 5.5.6 build 80404, VMware Player before 1.0.6 build 80404, VMware ACE before 1.0.5 build 79846, VMware Server before 1.0.5 build 80187, and VMware ESX 2.5.4 through 3.0.2 does not properly validate arguments in user-mode METHOD_NEITHER IOCTLs to the \.\hgfs device, which allows guest OS users to modify arbitrary memory locations in guest kernel memory and gain privileges.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:vmware:ace:1.0.0:*:*:*:*:*:*:*

cpe:2.3:a:vmware:ace:1.0.1:*:*:*:*:*:*:*

cpe:2.3:a:vmware:ace:1.0.2:*:*:*:*:*:*:*

cpe:2.3:a:vmware:ace:1.0.3:*:*:*:*:*:*:*

cpe:2.3:a:vmware:ace:1.0.4:*:*:*:*:*:*:*

cpe:2.3:a:vmware:esx_server:2.5.5:*:*:*:*:*:*:*

cpe:2.3:a:vmware:player:1.0.4:*:*:*:*:*:*:*

cpe:2.3:a:vmware:server:1.0.3:*:*:*:*:*:*:*

cpe:2.3:a:vmware:vmware_player:1.0.0:*:*:*:*:*:*:*

cpe:2.3:a:vmware:vmware_player:1.0.1:*:*:*:*:*:*:*

cpe:2.3:a:vmware:vmware_player:1.0.2:*:*:*:*:*:*:*

cpe:2.3:a:vmware:vmware_player:1.0.3:*:*:*:*:*:*:*

cpe:2.3:a:vmware:vmware_player:1.0.5:*:*:*:*:*:*:*

cpe:2.3:a:vmware:vmware_server:1.0.0:*:*:*:*:*:*:*

cpe:2.3:a:vmware:vmware_server:1.0.1:*:*:*:*:*:*:*

cpe:2.3:a:vmware:vmware_server:1.0.2:*:*:*:*:*:*:*

cpe:2.3:a:vmware:vmware_server:1.0.4:*:*:*:*:*:*:*

cpe:2.3:a:vmware:vmware_workstation:5.5.0:*:*:*:*:*:*:*

cpe:2.3:a:vmware:vmware_workstation:5.5.2:*:*:*:*:*:*:*

cpe:2.3:a:vmware:vmware_workstation:5.5.5:*:*:*:*:*:*:*

cpe:2.3:a:vmware:workstation:5.5.1:*:*:*:*:*:*:*

cpe:2.3:a:vmware:workstation:5.5.3:*:*:*:*:*:*:*

cpe:2.3:a:vmware:workstation:5.5.4:*:*:*:*:*:*:*

cpe:2.3:o:vmware:esx:2.5.4:*:*:*:*:*:*:*

cpe:2.3:o:vmware:esx:3.0.0:*:*:*:*:*:*:*

cpe:2.3:o:vmware:esx:3.0.1:*:*:*:*:*:*:*

cpe:2.3:o:vmware:esx:3.0.2:*:*:*:*:*:*:*

EPSS

Процентиль: 31%

0.00116

Низкий

4.4 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

CVE-2007-5671

ubuntu

больше 17 лет назад

HGFS.sys in the VMware Tools package in VMware Workstation 5.x before 5.5.6 build 80404, VMware Player before 1.0.6 build 80404, VMware ACE before 1.0.5 build 79846, VMware Server before 1.0.5 build 80187, and VMware ESX 2.5.4 through 3.0.2 does not properly validate arguments in user-mode METHOD_NEITHER IOCTLs to the \\.\hgfs device, which allows guest OS users to modify arbitrary memory locations in guest kernel memory and gain privileges.

CVE-2007-5671

debian

больше 17 лет назад

HGFS.sys in the VMware Tools package in VMware Workstation 5.x before ...

GHSA-rcvp-7793-9q23

github

больше 3 лет назад

HGFS.sys in the VMware Tools package in VMware Workstation 5.x before 5.5.6 build 80404, VMware Player before 1.0.6 build 80404, VMware ACE before 1.0.5 build 79846, VMware Server before 1.0.5 build 80187, and VMware ESX 2.5.4 through 3.0.2 does not properly validate arguments in user-mode METHOD_NEITHER IOCTLs to the \\.\hgfs device, which allows guest OS users to modify arbitrary memory locations in guest kernel memory and gain privileges.

EPSS

Процентиль: 31%

0.00116

Низкий

4.4 Medium

CVSS2

Дефекты

CWE-20