vulnwire
6.9med

CVE-2007-4591

vstor-ws60.sys in VMWare Workstation 6.0 allows local users to cause a denial of service (host operating system crash) and possibly gain pr…

Published 19 y ago · modified 4 mo ago · JSON

CVSS
6.9
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
0.4%
percentile 35%
Public exploits
0
none known

vstor-ws60.sys in VMWare Workstation 6.0 allows local users to cause a denial of service (host operating system crash) and possibly gain privileges by sending a small file buffer size value to the FsSetVolumeInformation IOCTL handler with an FsSetFileInformation subcode.

Exploit prediction (EPSS)

0.40% probability of exploitation in the next 30 days, higher than 35% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD2.06.9AV:L/AC:M/Au:N/C:C/I:C/A:C

Classification

Technology feeds
VMware (RSS, critical only)

References

  • securitytracker.com /id?1018609 · vdb-entry, x_refsource_SECTRACK, x_transferred
  • secunia.com /advisories/26606 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/36277 · vdb-entry, x_refsource_XF, x_transferred
  • securityfocus.com /bid/25441 · vdb-entry, x_refsource_BID, x_transferred
  • tarrysingh.blogspot.com /2007/08/security-vmware-workstation-6.html · x_refsource_MISC, x_transferred
  • vupen.com /english/advisories/2007/2992 · vdb-entry, x_refsource_VUPEN, x_transferred
  • marc.info /?l=bugtraq&m=118805138626360&w=2 · mailing-list, x_refsource_BUGTRAQ, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.