CVE-2007-5023

MediumCVSS 6.9/10Last modified Jun 16, 2026

Description

Unquoted Windows search path vulnerability in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Player 2 before 2.0.1 Build 55017, ACE before 1.0.3 Build 54075, and Server before 1.0.4 Build 56528 allows local users to gain privileges via unspecified vectors, possibly involving a malicious "program.exe" file in the C: folder.

Metrics

CVSS 2.0 6.9/10AV:L/AC:M/Au:N/C:C/I:C/A:C

Weakness enumeration

CWE-264

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.securityfocus.com/bid/25732Patch, Third Party Advisory, VDB Entry
http://www.vmware.com/support/ace/doc/releasenotes_ace.htmlPatch, Vendor Advisory
http://www.vmware.com/support/player/doc/releasenotes_player.htmlPatch, Vendor Advisory
http://www.vmware.com/support/player2/doc/releasenotes_player2.htmlPatch, Vendor Advisory
http://www.vmware.com/support/server/doc/releasenotes_server.htmlPatch, Vendor Advisory
http://www.vmware.com/support/ws55/doc/releasenotes_ws55.htmlPatch, Vendor Advisory
http://www.vmware.com/support/ws6/doc/releasenotes_ws6.htmlPatch, Vendor Advisory
http://www.securityfocus.com/bid/25732Patch, Third Party Advisory, VDB Entry
http://www.vmware.com/support/ace/doc/releasenotes_ace.htmlPatch, Vendor Advisory
http://www.vmware.com/support/player/doc/releasenotes_player.htmlPatch, Vendor Advisory
http://www.vmware.com/support/player2/doc/releasenotes_player2.htmlPatch, Vendor Advisory
http://www.vmware.com/support/server/doc/releasenotes_server.htmlPatch, Vendor Advisory
http://www.vmware.com/support/ws55/doc/releasenotes_ws55.htmlPatch, Vendor Advisory
http://www.vmware.com/support/ws6/doc/releasenotes_ws6.htmlPatch, Vendor Advisory

Timeline

Published: Sep 21, 2007
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2007

CVE-2007-50242.1EMC VMware Server before 1.0.4 Build 56528 writes passwords in cleartext to unspecified log files, which allows local users to obtain sensit CVE-2007-50259.3Unspecified vulnerability in EMC VMware ACE before 1.0.3 Build 54075 allows attackers to have an unknown impact via an unspecified manipulat CVE-2007-50265.0dBlog CMS, probably 2.0, stores sensitive information under the web root with insufficient access control, which allows remote attackers to CVE-2007-50274.3Multiple cross-site scripting (XSS) vulnerabilities in cgi-bin/ddns in the web management panel for the WBR3404TX broadband router with firm CVE-2007-50287.5Dibbler 0.6.0 on Linux uses weak world-writable permissions for unspecified files in /var/lib/dibbler, which has unknown impact and local at CVE-2007-50295.0Dibbler 0.6.0 does not verify that certain length parameters are appropriate for buffer sizes, which allows remote attackers to trigger a bu CVE-2007-50305.0Multiple integer overflows in Dibbler 0.6.0 allow remote attackers to cause a denial of service (daemon crash) via packets containing option CVE-2007-50315.0The TSrvOptIA_NA::rebind method in SrvOptions/SrvOptIA_NA.cpp in Dibbler 0.6.0 allows remote attackers to cause a denial of service (NULL de CVE-2007-50325.1Cross-site request forgery (CSRF) vulnerability in admin.php in Francisco Burzi PHP-Nuke allows remote attackers to add administrative accou CVE-2007-50334.3Cross-site scripting (XSS) vulnerability in profile.php in phpBB XS 2 allows remote attackers to inject arbitrary web script or HTML via the CVE-2007-50344.3ELinks before 0.11.3, when sending a POST request for an https URL, appends the body and content headers of the POST request to the CONNECT CVE-2007-50357.5PHP remote file inclusion vulnerability in html/modules/extranet_profile/main.php in openEngine 1.9 beta1 allows remote attackers to execute