Vulnerability Name:

CVE-2007-1877 (CCN-33992)

Assigned:2007-04-27
Published:2007-04-27
Updated:2018-10-16
Summary:VMware Workstation before 5.5.4 allows attackers to cause a denial of service against the guest OS by causing the virtual machine process (VMX) to store malformed configuration information.
CVSS v3 Severity:4.0 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Exploitability Metrics:Attack Vector (AV): Local
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Low
CVSS v2 Severity:7.8 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C)
5.8 Medium (Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Authentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Complete
2.1 Low (CCN CVSS v2 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P)
1.6 Low (CCN Temporal CVSS v2 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Local
Access Complexity (AC): Low
Athentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Partial
Vulnerability Type:CWE-Other
Vulnerability Consequences:Denial of Service
References:Source: CCN
Type: BugTraq Mailing List, Mon May 07 2007 - 09:44:46 CDT
[Reversemode Advisory] VMware Products - GPF Denial of Service

Source: CCN
Type: Full-Disclosure Mailing List, Mon May 07 2007 - 17:51:22 CDT
VMSA-2007-0004 Multiple Denial-of-Service issues fixed

Source: MITRE
Type: CNA
CVE-2007-1877

Source: CCN
Type: SA25079
VMware Products Multiple Vulnerabilities

Source: SECUNIA
Type: UNKNOWN
25079

Source: CCN
Type: SECTRACK ID: 1018011
VMware Bugs Let Local Users Deny Service

Source: CCN
Type: OSVDB ID: 35506
VMware Workstation VMX Malformed Config Information Local DoS

Source: BUGTRAQ
Type: UNKNOWN
20070507 VMSA-2007-0004 Multiple Denial-of-Service issues fixed

Source: BUGTRAQ
Type: UNKNOWN
20070518 VMSA-2007-0004.1 Updated: Multiple Denial-of-Service issues fixed and directory traversal vulnerability

Source: BID
Type: UNKNOWN
23732

Source: CCN
Type: BID-23732
VMware Multiple Denial Of Service Vulnerabilities

Source: SECTRACK
Type: UNKNOWN
1018011

Source: CCN
Type: Vmware Web site
Data Center Products

Source: CCN
Type: VMware Workstation Web site
VMware Workstation Documentation

Source: CCN
Type: VMware Workstation 5.5 Release Notes
New in Version 5.5.4

Source: CONFIRM
Type: Patch
http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html#554

Source: VUPEN
Type: UNKNOWN
ADV-2007-1592

Source: XF
Type: UNKNOWN
vmware-vmx-dos(33992)

Source: XF
Type: UNKNOWN
vmware-vmx-dos(33992)

Vulnerable Configuration:Configuration 1:
  • cpe:/a:vmware:workstation:*:*:*:*:*:*:*:* (Version <= 5.5.3)

  • Configuration CCN 1:
  • cpe:/a:vmware:workstation:5.5.1:*:*:*:*:*:*:*
  • OR cpe:/a:vmware:workstation:5.5.3:*:*:*:*:*:*:*
  • OR cpe:/a:vmware:workstation:5.5.0:*:*:*:*:*:*:*
  • OR cpe:/a:vmware:workstation:5.5.2:*:*:*:*:*:*:*

  • * Denotes that component is vulnerable
    BACK
    vmware workstation *
    vmware workstation 5.5.1
    vmware workstation 5.5.3
    vmware workstation 5.5.0
    vmware workstation 5.5.2