CVE-2007-0063

high · 10

Integer underflow in the DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Player 2 before 2.0.1 Build 55017, ACE before 1.0.3 Build 54075 and ACE 2 before 2.0.1 Build 55017, and Server before 1.0.4 Build 56528 allows remote attackers to execute arbitrary code via a malformed DHCP packet that triggers a stack-based buffer overflow.

CVSS

20.4%

EPSS (exploit prob.)

97th

EPSS percentile

2007-09-21

Published

AV:N/AC:L/Au:N/C:C/I:C/A:C

Weaknesses

CWE-191

Affected products

Vendor	Product	Affected versions
vmware	ace	>= 1.0, < 1.0.3
vmware	ace	>= 2.0, < 2.0.1
vmware	player	>= 1.0, < 1.0.5
vmware	player	>= 2.0, < 2.0.1
vmware	server	>= 1.0, < 1.0.4
vmware	workstation	>= 5.5, < 5.5.5
vmware	workstation	>= 6.0, < 6.0.1
vmware	esx	2.0.2
vmware	esx	2.1.3
vmware	esx	2.5.3
vmware	esx	2.5.4
vmware	esx	3.0.0
vmware	esx	3.0.1
canonical	ubuntu_linux	6.06
canonical	ubuntu_linux	6.10
canonical	ubuntu_linux	7.04

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2007-0063