CVE-2006-3547: Medium severity VMware Player vulnerability

Published Jul 13, 2006

Updated

DISPUTED EMC VMware Player allows user-assisted attackers to cause a denial of service (unrecoverable application failure) via a long value of the ide1:0.fileName parameter in the .vmx file of a virtual machine. NOTE: third parties have disputed this issue, saying that write access to the .vmx file enables other ways of stopping the virtual machine, so no privilege boundaries are crossed.

Affected Software

1 affected component

VMware Player

Event History

Jul 13, 2006

CVE Published

12:05 AM

Disputed

12:05 AM

CVE Published

via MITRE·04:00 AM

Data Sourced

via MITRE·04:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2006-3547?

CVE-2006-3547 is considered a denial of service vulnerability that can lead to an unrecoverable application failure.

How do I fix CVE-2006-3547?

To mitigate CVE-2006-3547, ensure that the .vmx files do not contain excessively long values for the ide1:0.fileName parameter.

What software is affected by CVE-2006-3547?

CVE-2006-3547 affects VMware Player versions that allow processing of .vmx files.

Is CVE-2006-3547 easily exploitable?

CVE-2006-3547 requires user-assisted actions, making it less likely to be exploited remotely without user interaction.

Has CVE-2006-3547 been disputed?

Yes, some third parties have disputed the validity of the denial of service claim associated with CVE-2006-3547.