4 results (0.005 seconds)

CVSS: 4.6EPSS: 0%CPEs: 71EXPL: 0

CVE-2008-4916

https://notcve.org/view.php?id=CVE-2008-4916

Unspecified vulnerability in a guest virtual device driver in VMware Workstation before 5.5.9 build 126128, and 6.5.1 and earlier 6.x versions; VMware Player before 1.0.9 build 126128, and 2.5.1 and earlier 2.x versions; VMware ACE before 1.0.8 build 125922, and 2.5.1 and earlier 2.x versions; VMware Server 1.x before 1.0.8 build 126538 and 2.0.x before 2.0.1 build 156745; VMware Fusion before 2.0.1; VMware ESXi 3.5; and VMware ESX 3.0.2, 3.0.3, and 3.5 allows guest OS users to cause a denial of service (host OS crash) via unknown vectors. Vulnerabilidad no especificada en un controlado de dispositivo virtual invitado en VMware Workstation versiones anteriores a v5.5.9 build 126128, y v6.5.1 y versiones anteriores 6.x ; VMware Player versiones anteriores a v1.0.9 build 126128, y v2.5.1 y versiones anteriores 2.x; VMware ACE versiones anteriores a v1.0.8 build 125922, y v2.5.1 y versiones anteriores 2.x; VMware Server 1.x versiones anteriores a v1.0.8 build 126538 y 2.0.x versiones anteriores a v2.0.1 build 156745; VMware Fusion versiones anteriore a v2.0.1; VMware ESXi v3.5; y VMware ESX 3.0.2, v3.0.3, y v3.5 permite a usuarios del sistema operativo visitantes provocar una denegación de servicio (caída del sistema operativo host) a través de vectores desconocidos. • http://lists.vmware.com/pipermail/security-announce/2009/000054.html http://seclists.org/fulldisclosure/2009/Apr/0036.html http://security.gentoo.org/glsa/glsa-201209-25.xml http://www.securityfocus.com/bid/34373 http://www.securitytracker.com/id?1021973 http://www.vmware.com/security/advisories/VMSA-2009-0005.html http://www.vupen.com/english/advisories/2009/0944 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6439 •

CVSS: 2.1EPSS: 0%CPEs: 1EXPL: 0

CVE-2007-5024

https://notcve.org/view.php?id=CVE-2007-5024

EMC VMware Server before 1.0.4 Build 56528 writes passwords in cleartext to unspecified log files, which allows local users to obtain sensitive information by reading these files, a different vulnerability than CVE-2005-3620. EMC VMware Server versiones anteriores a 1.0.4 Build 56528 escribe contraseñas en texto en claro en ficheros de trazas no especificados, lo cual permite a usuarios locales obtener información confidencial al leer estos ficheros, vulnerabilidad distinta de CVE-2005-3620. • http://www.vmware.com/support/server/doc/releasenotes_server.html • CWE-310: Cryptographic Issues •

CVSS: 9.3EPSS: 30%CPEs: 1EXPL: 1

CVE-2007-4155 – VMware Inc 6.0.0 - CreateProcess Remote Code Execution

https://notcve.org/view.php?id=CVE-2007-4155

Absolute path traversal vulnerability in a certain ActiveX control in vielib.dll in EMC VMware 6.0.0 allows remote attackers to execute arbitrary local programs via a full pathname in the first two arguments to the (1) CreateProcess or (2) CreateProcessEx method. Vulnerabilidad de salto de ruta absoluta en un determinado control ActiveX en vielib.dll de EMC VMware 6.0.0 permite a atacantes remotos ejecutar programas locales de su elección mediante un nombre de ruta absoluta en los dos primeros argumentos de los métodos (1) CreateProcess ó (2) CreateProcessEx • https://www.exploit-db.com/exploits/4245 http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html http://secunia.com/advisories/26890 http://www.securityfocus.com/bid/25131 http://www.securitytracker.com/id?1018511 http://www.vmware.com/support/ace/doc/releasenotes_ace.html http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html http://www.vmware.com/support/player/doc/releasenotes_player.html http://www.vmware.com/support/player2/doc/releasenotes_player2& •

CVSS: 4.3EPSS: 82%CPEs: 1EXPL: 1

CVE-2007-4058 – VMware Inc 6.0.0 - 'vielib.dll 2.2.5.42958' Remode Code Execution

https://notcve.org/view.php?id=CVE-2007-4058

Absolute path traversal vulnerability in a certain ActiveX control in vielib.dll 2.2.5.42958 in EMC VMware 6.0.0 allows remote attackers to execute arbitrary local programs via a full pathname in the first argument to the StartProcess method. Vulnerabilidad de salto de directorio absoluto en un determinado control ActiveX de viewlib.dll 2.2.5.42958 en EMC VMware 6.0.0 permite a atacantes remotos ejecutar programas locales de su elección mediante un nombre de ruta completo en el primer argumento del método StartProcess. • https://www.exploit-db.com/exploits/4244 http://www.securityfocus.com/bid/25118 https://exchange.xforce.ibmcloud.com/vulnerabilities/35673 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •