National Cyber Awareness System

Vulnerability Summary for CVE-2007-5438

Overview

Unspecified vulnerability in a certain ActiveX control in Reconfig.DLL in VMware Workstation 5.5.x before 5.5.8 build 108000, VMware Workstation 6.0.x before 6.0.5 build 109488, VMware Player 1.x before 1.0.8 build 108000, VMware Player 2.x before 2.0.5 build 109488, VMware ACE 1.x before 1.0.7 build 108880, VMware ACE 2.x before 2.0.5 build 109488, and VMware Server before 1.0.7 build 108231 might allow local users to cause a denial of service to the Virtual Disk Mount Service (vmount2.exe), related to the ConnectPopulatedDiskEx function.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: VUPEN

Name: ADV-2008-2466

Type: Advisory

Hyperlink:http://www.vupen.com/english/advisories/2008/2466

External Source: CONFIRM

Name: http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html

Hyperlink:http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html

External Source: CONFIRM

Name: http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html

Hyperlink:http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html

External Source: CONFIRM

Name: http://www.vmware.com/support/server/doc/releasenotes_server.html

Hyperlink:http://www.vmware.com/support/server/doc/releasenotes_server.html

External Source: CONFIRM

Name: http://www.vmware.com/support/player2/doc/releasenotes_player2.html

Hyperlink:http://www.vmware.com/support/player2/doc/releasenotes_player2.html

External Source: CONFIRM

Name: http://www.vmware.com/support/player/doc/releasenotes_player.html

Hyperlink:http://www.vmware.com/support/player/doc/releasenotes_player.html

External Source: CONFIRM

Name: http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html

Hyperlink:http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html

External Source: CONFIRM

Name: http://www.vmware.com/support/ace/doc/releasenotes_ace.html

Hyperlink:http://www.vmware.com/support/ace/doc/releasenotes_ace.html

External Source: CONFIRM

Name: http://www.vmware.com/security/advisories/VMSA-2008-0014.html

Hyperlink:http://www.vmware.com/security/advisories/VMSA-2008-0014.html

External Source: SECTRACK

Name: 1020791

Hyperlink:http://www.securitytracker.com/id?1020791

External Source: BID

Name: 26025

Hyperlink:http://www.securityfocus.com/bid/26025

External Source: BUGTRAQ

Name: 20080830 VMSA-2008-0014 Updates to VMware Workstation, VMware Player, VMware ACE, VMware Server, VMware ESX address information disclosure, privilege escalation and other security issues.

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/495869/100/0/threaded

External Source: BUGTRAQ

Name: 20071010 [ELEYTT] 10PAZDZIERNIK2007

Type: Advisory

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/482021/100/0/threaded

External Source: SREASON

Name: 3219

Hyperlink:http://securityreason.com/securityalert/3219

External Source: SECUNIA

Name: 31710

Type: Advisory

Hyperlink:http://secunia.com/advisories/31710

External Source: SECUNIA

Name: 31709

Type: Advisory

Hyperlink:http://secunia.com/advisories/31709

External Source: SECUNIA

Name: 31708

Type: Advisory

Hyperlink:http://secunia.com/advisories/31708

External Source: SECUNIA

Name: 31707

Type: Advisory

Hyperlink:http://secunia.com/advisories/31707

External Source: OSVDB

Name: 43488

Hyperlink:http://osvdb.org/43488

External Source: FULLDISC

Name: 20080830 VMSA-2008-0014 Updates to VMware Workstation, VMware Player, VMware ACE, VMware Server, VMware ESX address information disclosure, privilege escalation and other security issues.

Hyperlink:http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/064118.html