CVE-2007-5617 Denial of service in n/a
Attackers can cause VMware Player or Workstation to fail launching by providing malicious virtual machine images, requiring user interaction to load the image.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2007-5617?
CVE-2007-5617 is a critical denial of service vulnerability in Vmware Player, published on 21 Oct 2007. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
Unspecified vulnerability in VMware Player 1.0.x before 1.0.5 and 2.0 before 2.0.1, and Workstation 5.x before 5.5.5 and 6.x before 6.0.1, prevents it from launching, which has unspecified impact, related to untrusted virtual machine images.
Which versions are affected by CVE-2007-5617?
It affects 2 products.
Products include Vmware Player, Vmware Workstation.
How do I fix CVE-2007-5617?
No fix has been published for CVE-2007-5617 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2007-5617 being exploited?
There is no known exploitation of CVE-2007-5617 in the wild and no public exploit code.
Other vulnerabilities in Vmware Player
Sources
Also known as GHSA-82x9-mw4h-vm66.