Vulnerability in VMware Player

CVE-2007-5618

Unquoted Windows search path vulnerability in the Authorization and other services in VMware Player 1.0.x before 1.0.5 and 2.0 before 2.0.1, VMware Server before 1.0.4, and Workstation 5.x before 5.5.5 and 6.x before 6.0.1 might allow local users to gain privileges via malicious programs.

EPSS: 0.005 (36.9th percentile) — read the EPSS interpretation.

Affected products

References

  • cve@mitre.org (mailing-list, x_refsource_FULLDISC, Third Party Advisory)
  • cve@mitre.org (Third Party Advisory, vdb-entry, x_refsource_VUPEN)
  • cve@mitre.org (x_refsource_CONFIRM, Patch, Vendor Advisory)
  • cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
  • cve@mitre.org (x_refsource_CONFIRM, Patch, Vendor Advisory)
  • cve@mitre.org (x_refsource_SECUNIA, Third Party Advisory, third-party-advisory)
  • cve@mitre.org (x_refsource_CONFIRM, Patch, Vendor Advisory)
  • cve@mitre.org (x_refsource_CONFIRM, Patch, Vendor Advisory)
  • cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
  • cve@mitre.org (mailing-list, x_refsource_BUGTRAQ, VDB Entry, Third Party Advisory)