HIGH🇵🇱 Wersja polska

CVE-2007-0063

CVSS 10.0v2.0pub. 2007-09-21upd. 2026-04-23

Integer underflow in the DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Player 2 before 2.0.1 Build 55017, ACE before 1.0.3 Build 54075 and ACE 2 before 2.0.1 Build 55017, and Server before 1.0.4 Build 56528 allows remote attackers to execute arbitrary code via a malformed DHCP packet that triggers a stack-based buffer overflow.

CVSS Vector
AV:N/AC:L/Au:N/C:C/I:C/A:C

  • Canonical Ubuntu

    OS
    Canonical
    6.066.107.04

  • VMware Ace

    APP
    Vmware
    1.0 – 1.0.3 (excl.)2.0 – 2.0.1 (excl.)

  • VMware Esx

    OS
    Vmware
    2.0.22.1.32.5.32.5.43.0.03.0.1

  • VMware Player

    APP
    Vmware
    1.0 – 1.0.5 (excl.)2.0 – 2.0.1 (excl.)

  • VMware Server

    APP
    Vmware
    1.0 – 1.0.4 (excl.)

  • VMware Workstation

    APP
    Vmware
    5.5 – 5.5.5 (excl.)6.0 – 6.0.1 (excl.)
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
RCEMemory
CWE
References

Related vulnerabilities

CVE-2025-32463CRITICAL9.3⚠ KEVPL ✓same product

Sudo: eskalacja uprawnień do root poprzez opcję --chroot (CVE-2025-32463)

CVE-2025-22224CRITICAL9.3⚠ KEVPL ✓same product

VMware ESXi/Workstation: TOCTOU umożliwia ucieczkę z VM przez VMX process

CVE-2022-0543CRITICAL10.0⚠ KEVPL ✓same product

Redis – ucieczka z Lua sandbox umożliwiająca zdalne wykonanie kodu (RCE)

CVE-2020-11651CRITICAL9.8⚠ KEVPL ✓same product

SaltStack Salt: nieautoryzowany dostęp do metod salt-master umożliwiający RCE

CVE-2020-7247CRITICAL9.8⚠ KEVPL ✓same product

RCE jako root w OpenSMTPD przez command injection w polu MAIL FROM