PT-2006-4422 · Vmware · Vmware Player

Published 2006-07-13 · Updated 2025-01-17 · CVE-2006-3547

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions EMC VMware Player (affected versions not specified)

Description The issue allows user-assisted attackers to cause a denial of service, resulting in an unrecoverable application failure. This can be achieved by setting a long value for the ide1:0.fileName parameter in the .vmx file of a virtual machine. It is noted that third parties have disputed this issue, stating that write access to the .vmx file already enables other methods to stop the virtual machine, thus not crossing any privilege boundaries.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2006-3547

Affected Products

Vmware Player

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2006-3547 · Security Note
• https://t.me/cvenotify/107748 · Telegram Post
• http://osvdb.org/27524 · Note
• https://t.me/cvenotify/89795 · Telegram Post
• http://securityfocus.com/archive/1/437806/100/200/threaded · Note
• http://securityfocus.com/archive/1/437756/100/200/threaded · Note
• http://securityfocus.com/archive/1/437809/100/200/threaded · Note