What is CVE-2006-3547?

CVE-2006-3547 is a medium-severity vulnerability in VMware Player. CVSS score: 5.5/10. Published 2006-07-13.

How severe is CVE-2006-3547?

Medium severity. CVSS v3 base score is 5.5 out of 10.

Vulnerability in VMware Player

CVE-2006-3547

EMC VMware Player allows user-assisted attackers to cause a denial of service (unrecoverable application failure) via a long value of the ide1:0.fileName parameter in the .vmx file of a virtual machine. NOTE: third parties have disputed this issue, saying that write access to the .vmx file enables other ways of stopping the virtual machine, so no privilege boundaries are crossed

EPSS: 0.009 (56.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.

Affected products

Vmware Player
N/a — versions n/a

References

cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
cve@mitre.org (x_refsource_OSVDB, vdb-entry)
cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)

Frequently asked questions

What is CVE-2006-3547?: CVE-2006-3547 is a medium-severity vulnerability in VMware Player. CVSS score: 5.5/10. Published 2006-07-13.
How severe is CVE-2006-3547?: Medium severity. CVSS v3 base score is 5.5 out of 10.