Evil-DB LogoEvil-DB
← All CVEs

CVE-2009-3707

medium · 5

VMware Authentication Daemon 1.0 in vmware-authd.exe in the VMware Authorization Service in VMware Workstation 7.0 before 7.0.1 build 227600 and 6.5.x before 6.5.4 build 246459, VMware Player 3.0 before 3.0.1 build 227600 and 2.5.x before 2.5.4 build 246459, VMware ACE 2.6 before 2.6.1 build 227600 and 2.5.x before 2.5.4 build 246459, and VMware Server 2.x allows remote attackers to cause a denial of service (process crash) via a \x25\xFF sequence in the USER and PASS commands, related to a "format string DoS" issue. NOTE: some of these details are obtained from third party information.

5
CVSS
11.1%
EPSS (exploit prob.)
96th
EPSS percentile
2009-10-16
Published

AV:N/AC:L/Au:N/C:N/I:N/A:P

Weaknesses

CWE-134

Affected products

VendorProductAffected versions
vmwareace2.5.0
vmwareace2.5.1
vmwareace2.5.2
vmwareace2.5.3
vmwareace2.5.4
vmwareace2.6
vmwareace2.6.1
vmwareplayer2.5
vmwareplayer2.5.1
vmwareplayer2.5.2
vmwareplayer2.5.3
vmwareplayer2.5.4
vmwareplayer3.0
vmwareplayer3.0.1
vmwareserver2.0.0
vmwareserver2.0.1
vmwareserver2.0.2
vmwareworkstation6.5.0
vmwareworkstation6.5.1
vmwareworkstation6.5.2
vmwareworkstation6.5.3
vmwareworkstation6.5.4
vmwareworkstation7.0
vmwareworkstation7.0.1

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2009-3707