NVD

Id
56286  
Name
CVE-2007-4155  
Description
Absolute path traversal vulnerability in a certain ActiveX control in vielib.dll in EMC VMware 6.0.0 allows remote attackers to execute arbitrary local programs via a full pathname in the first two arguments to the (1) CreateProcess or (2) CreateProcessEx method.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-08-03  
Modified Date
2011-03-07  
Seq
2007-4155  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
286682 56286 CVE-2007-4155 20070920 VMSA-2007-0006 Critical security updates for all supported versions of VMware ESX Server, VMware Server, VMware Workstation, VMware ACE, and VMware Player  View
286683 56286 CVE-2007-4155 4245  View
286684 56286 CVE-2007-4155 25131  View
286685 56286 CVE-2007-4155 1018511  View
286686 56286 CVE-2007-4155 http://www.vmware.com/support/ace/doc/releasenotes_ace.html  View
286687 56286 CVE-2007-4155 http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html  View
286688 56286 CVE-2007-4155 http://www.vmware.com/support/player/doc/releasenotes_player.html  View
286689 56286 CVE-2007-4155 http://www.vmware.com/support/player2/doc/releasenotes_player2.html  View
286690 56286 CVE-2007-4155 http://www.vmware.com/support/server/doc/releasenotes_server.html  View
286691 56286 CVE-2007-4155 http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html  View
286692 56286 CVE-2007-4155 http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html  View
286693 56286 CVE-2007-4155 ADV-2007-3229  View
286694 56286 CVE-2007-4155 vmware-createprocess-code-execution(35670)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
53767 JVNDB-2007-002459 EMC VMware の vielib.dll の特定の ActiveX コントロールにおける絶対パストラバーサルの脆弱性 EMC VMware の vielib.dll の特定の ActiveX コントロールには、絶対パストラバーサルの脆弱性が存在します。 CVE-2007-4155 27510 CVE-2007-4155 56286 9.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002459.html 2007-08-03 2012-06-26 View