PT-2006-4422 · Vmware · Vmware Player

CVE-2006-3547 · Publicado 2006-07-13 · Atualizado 2025-01-17

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions EMC VMware Player (affected versions not specified)

Description The issue allows user-assisted attackers to cause a denial of service, resulting in an unrecoverable application failure. This can be achieved by setting a long value for the ide1:0.fileName parameter in the .vmx file of a virtual machine. It is noted that third parties have disputed this issue, stating that write access to the .vmx file already enables other methods to stop the virtual machine, thus not crossing any privilege boundaries.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2006-3547

Produtos afetados

Vmware Player

Referências · 7

• https://t.me/cvenotify/107748 · Publicação no Telegram
• http://osvdb.org/27524 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-3547 · Nota de Segurança
• https://t.me/cvenotify/89795 · Publicação no Telegram
• http://securityfocus.com/archive/1/437806/100/200/threaded · Nota
• http://securityfocus.com/archive/1/437756/100/200/threaded · Nota
• http://securityfocus.com/archive/1/437809/100/200/threaded · Nota