CVE - CVE-2007-5438

CVE-ID
CVE-2007-5438	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
Unspecified vulnerability in a certain ActiveX control in Reconfig.DLL in VMware Workstation 5.5.x before 5.5.8 build 108000, VMware Workstation 6.0.x before 6.0.5 build 109488, VMware Player 1.x before 1.0.8 build 108000, VMware Player 2.x before 2.0.5 build 109488, VMware ACE 1.x before 1.0.7 build 108880, VMware ACE 2.x before 2.0.5 build 109488, and VMware Server before 1.0.7 build 108231 might allow local users to cause a denial of service to the Virtual Disk Mount Service (vmount2.exe), related to the ConnectPopulatedDiskEx function.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
BID:26025 URL:http://www.securityfocus.com/bid/26025 BUGTRAQ:20071010 [ELEYTT] 10PAZDZIERNIK2007 URL:http://www.securityfocus.com/archive/1/482021/100/0/threaded BUGTRAQ:20080830 VMSA-2008-0014 Updates to VMware Workstation, VMware Player, VMware ACE, VMware Server, VMware ESX address information disclosure, privilege escalation and other security issues. URL:http://www.securityfocus.com/archive/1/495869/100/0/threaded CONFIRM:http://www.vmware.com/security/advisories/VMSA-2008-0014.html CONFIRM:http://www.vmware.com/support/ace/doc/releasenotes_ace.html CONFIRM:http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html CONFIRM:http://www.vmware.com/support/player/doc/releasenotes_player.html CONFIRM:http://www.vmware.com/support/player2/doc/releasenotes_player2.html CONFIRM:http://www.vmware.com/support/server/doc/releasenotes_server.html CONFIRM:http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html CONFIRM:http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html FULLDISC:20080830 VMSA-2008-0014 Updates to VMware Workstation, VMware Player, VMware ACE, VMware Server, VMware ESX address information disclosure, privilege escalation and other security issues. URL:http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/064118.html MISC:http://www.eleytt.com/advisories/eleytt_VMWARE1.pdf OSVDB:43488 URL:~~http://osvdb.org/43488~~ (Obsolete source) SECTRACK:1020791 URL:http://www.securitytracker.com/id?1020791 SECUNIA:31707 URL:http://secunia.com/advisories/31707 SECUNIA:31708 URL:http://secunia.com/advisories/31708 SECUNIA:31709 URL:http://secunia.com/advisories/31709 SECUNIA:31710 URL:http://secunia.com/advisories/31710 SREASON:3219 URL:http://securityreason.com/securityalert/3219 VUPEN:ADV-2008-2466 URL:~~http://www.vupen.com/english/advisories/2008/2466~~ (Obsolete source)
Assigning CNA
MITRE Corporation
Date Record Created
20071012	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20071012)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)