National Vulnerability Database (NVD) National Vulnerability Database (CVE-2007-4496)

Mission and Overview

NVD is the U.S. government repository of standards based vulnerability management data. This data enables automation of vulnerability management, security measurement, and compliance (e.g. FISMA).

Resource Status

NVD contains:

CVE Vulnerabilities: 40611
Checklists: 129
US-CERT Alerts: 191
US-CERT Vuln Notes: 2369
OVAL Queries: 2517
CPE Names: 20312

Last updated: Wed Feb 10 01:00:36 EST 2010

CVE Publication rate: 10.57

Email List

NVD provides four mailing lists to the public. For information and subscription instructions please visit NVD Mailing Lists

Workload Index

Vulnerability Workload Index: 5.87

About Us

NVD is a product of the NIST Computer Security Division and is sponsored by the Department of Homeland Security's National Cyber Security Division. It supports the U.S. government multi-agency (OSD, DHS, NSA, DISA, and NIST) Information Security Automation Program. It is the U.S. government content repository for the Security Content Automation Protocol (SCAP).

NIST Security Configuration Checklists - CSD

National Cyber-Alert System

Vulnerability Summary for CVE-2007-4496

Original release date:09/21/2007

Last revised:09/05/2008

Source: US-CERT/NIST

Overview

Unspecified vulnerability in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Player 2 before 2.0.1 Build 55017, ACE before 1.0.3 Build 54075 and ACE 2 before 2.0.1 Build 55017, and Server before 1.0.4 Build 56528 allows authenticated users with administrative privileges on a guest operating system to corrupt memory and possibly execute arbitrary code on the host operating system via unspecified vectors.

Impact

CVSS Severity (version 2.0):

CVSS v2 Base Score:6.5 (MEDIUM) (AV:A/AC:H/Au:S/C:C/I:C/A:C) (legend)

Impact Subscore: 10.0

Exploitability Subscore: 2.5

CVSS Version 2 Metrics:

Access Vector: Local network exploitable

Access Complexity: High

Authentication: Required to exploit

Impact Type:Provides administrator access, Allows complete confidentiality, integrity, and availability violation; Allows unauthorized disclosure of information; Allows disruption of service

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: CONFIRM

Name: http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html

Type: Patch Information

Hyperlink:http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html

External Source: CONFIRM

Name: http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html

Type: Patch Information

Hyperlink:http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html

External Source: CONFIRM

Name: http://www.vmware.com/support/server/doc/releasenotes_server.html

Type: Patch Information

Hyperlink:http://www.vmware.com/support/server/doc/releasenotes_server.html

External Source: CONFIRM

Name: http://www.vmware.com/support/player2/doc/releasenotes_player2.html

Type: Patch Information

Hyperlink:http://www.vmware.com/support/player2/doc/releasenotes_player2.html

External Source: CONFIRM

Name: http://www.vmware.com/support/player/doc/releasenotes_player.html

Type: Patch Information

Hyperlink:http://www.vmware.com/support/player/doc/releasenotes_player.html

External Source: CONFIRM

Name: http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html

Type: Patch Information

Hyperlink:http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html

External Source: CONFIRM

Name: http://www.vmware.com/support/ace/doc/releasenotes_ace.html

Type: Patch Information

Hyperlink:http://www.vmware.com/support/ace/doc/releasenotes_ace.html

External Source: BID

Name: 25728

Type: Patch Information

Hyperlink:http://www.securityfocus.com/bid/25728

External Source: UBUNTU

Name: USN-543-1

Hyperlink:http://www.ubuntu.com/usn/usn-543-1

External Source: SECTRACK

Name: 1018718

Hyperlink:http://www.securitytracker.com/id?1018718

External Source: VUPEN

Name: ADV-2007-3229

Hyperlink:http://www.frsirt.com/english/advisories/2007/3229

External Source: GENTOO

Name: GLSA-200711-23

Hyperlink:http://security.gentoo.org/glsa/glsa-200711-23.xml

External Source: SECUNIA

Name: 27706

Hyperlink:http://secunia.com/advisories/27706

External Source: SECUNIA

Name: 27694

Hyperlink:http://secunia.com/advisories/27694

External Source: SECUNIA

Name: 26890

Hyperlink:http://secunia.com/advisories/26890

External Source: FULLDISC

Name: 20070920 VMSA-2007-0006 Critical security updates for all supported versions of VMware ESX Server, VMware Server, VMware Workstation, VMware ACE, and VMware Player

Hyperlink:http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html