CVEvulnerability
CVE-2007-5438
1.9 LOW
Official page ↗
- Status
- Modified
- Published
- 2007-10-13
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 1.9 LOW — AV:L/AC:M/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-20
Description
Unspecified vulnerability in a certain ActiveX control in Reconfig.DLL in VMware Workstation 5.5.x before 5.5.8 build 108000, VMware Workstation 6.0.x before 6.0.5 build 109488, VMware Player 1.x before 1.0.8 build 108000, VMware Player 2.x before 2.0.5 build 109488, VMware ACE 1.x before 1.0.7 build 108880, VMware ACE 2.x before 2.0.5 build 109488, and VMware Server before 1.0.7 build 108231 might allow local users to cause a denial of service to the Virtual Disk Mount Service (vmount2.exe), related to the ConnectPopulatedDiskEx function.
Affected configurations
• vmware ace 1.0
• vmware ace 1.0.1
• vmware ace 1.0.2
• vmware ace 1.0.3
• vmware ace 1.0.4
• vmware ace 1.0.5
• vmware ace 1.0.6
• vmware ace 1.0.7
• vmware ace 2.0
• vmware ace 2.0.1
• vmware ace 2.0.2
• vmware ace 2.0.3
• vmware ace 2.0.4
• vmware ace 2.0.5
• vmware vmware player 1.0.0
• vmware vmware player 1.0.1
• vmware vmware player 1.0.2
• vmware vmware player 1.0.3
• vmware vmware player 1.0.4
• vmware vmware player 1.0.5
• vmware vmware player 1.0.6
• vmware vmware player 1.0.7
• vmware vmware player 1.0.8
• vmware vmware player 2.0
• vmware vmware player 2.0.1
• vmware vmware player 2.0.2
• vmware vmware player 2.0.3
• vmware vmware player 2.0.4
• vmware vmware player 2.0.5
• vmware vmware server (<= 1.0.7)
• vmware vmware server 1.0
• vmware vmware server 1.0.1
• vmware vmware server 1.0.2
• vmware vmware server 1.0.3
• vmware vmware server 1.0.4
• vmware vmware server 1.0.5
• vmware vmware server 1.0.6
• vmware vmware workstation 5.5.0
• vmware vmware workstation 5.5.1
• vmware vmware workstation 5.5.2
• vmware vmware workstation 5.5.3
• vmware vmware workstation 5.5.4
• vmware vmware workstation 5.5.5
• vmware vmware workstation 5.5.6
• vmware vmware workstation 5.5.7
• vmware vmware workstation 5.5.8
• vmware vmware workstation 6.0
• vmware vmware workstation 6.0.1
• vmware vmware workstation 6.0.2
• vmware vmware workstation 6.0.3
• vmware vmware workstation 6.0.4
• vmware vmware workstation 6.0.5
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/064118.html lists.grok.org.uk
- http://osvdb.org/43488 osvdb.org
- http://secunia.com/advisories/31707 Vendor Advisory
- http://secunia.com/advisories/31708 Vendor Advisory
- http://secunia.com/advisories/31709 Vendor Advisory
- http://secunia.com/advisories/31710 Vendor Advisory
- http://securityreason.com/securityalert/3219 securityreason.com
- http://www.eleytt.com/advisories/eleytt_VMWARE1.pdf www.eleytt.com
- http://www.securityfocus.com/archive/1/482021/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/495869/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/26025 www.securityfocus.com
- http://www.securitytracker.com/id?1020791 www.securitytracker.com
- http://www.vmware.com/security/advisories/VMSA-2008-0014.html www.vmware.com
- http://www.vmware.com/support/ace/doc/releasenotes_ace.html www.vmware.com
- http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html www.vmware.com
- http://www.vmware.com/support/player/doc/releasenotes_player.html www.vmware.com
- http://www.vmware.com/support/player2/doc/releasenotes_player2.html www.vmware.com
- http://www.vmware.com/support/server/doc/releasenotes_server.html www.vmware.com
- http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html www.vmware.com
- http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html www.vmware.com
- http://www.vupen.com/english/advisories/2008/2466 Vendor Advisory
- http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/064118.html lists.grok.org.uk
- http://osvdb.org/43488 osvdb.org
- http://secunia.com/advisories/31707 Vendor Advisory
- http://secunia.com/advisories/31708 Vendor Advisory
- http://secunia.com/advisories/31709 Vendor Advisory
- http://secunia.com/advisories/31710 Vendor Advisory
- http://securityreason.com/securityalert/3219 securityreason.com
- http://www.eleytt.com/advisories/eleytt_VMWARE1.pdf www.eleytt.com
- http://www.securityfocus.com/archive/1/482021/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/495869/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/26025 www.securityfocus.com
- http://www.securitytracker.com/id?1020791 www.securitytracker.com
- http://www.vmware.com/security/advisories/VMSA-2008-0014.html www.vmware.com
- http://www.vmware.com/support/ace/doc/releasenotes_ace.html www.vmware.com
- http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html www.vmware.com
- http://www.vmware.com/support/player/doc/releasenotes_player.html www.vmware.com
- http://www.vmware.com/support/player2/doc/releasenotes_player2.html www.vmware.com
- http://www.vmware.com/support/server/doc/releasenotes_server.html www.vmware.com
- http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html www.vmware.com
- http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html www.vmware.com
- http://www.vupen.com/english/advisories/2008/2466 Vendor Advisory