CVE-2007-1270: Double Free

Published Apr 6, 2007

Updated

Double free vulnerability in VMware ESX Server 3.0.0 and 3.0.1 allows attackers to cause a denial of service (crash), obtain sensitive information, or possibly execute arbitrary code via unspecified vectors.

Affected Software

3 affected components

VMware ESX Server=3.0

VMware ESX=3.0.0

VMware ESX=3.0.1

Event History

Apr 6, 2007

CVE Published

12:19 AM

CVE Published

via MITRE·04:00 AM

Data Sourced

via MITRE·04:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2007-1270?

CVE-2007-1270 has a high severity rating due to its potential to cause denial of service, access sensitive information, or execute arbitrary code.

How do I fix CVE-2007-1270?

To fix CVE-2007-1270, apply available patches provided by VMware for ESX Server versions 3.0.0 and 3.0.1.

Which versions of VMware ESX are affected by CVE-2007-1270?

CVE-2007-1270 affects VMware ESX Server versions 3.0.0 and 3.0.1.

What are the potential impacts of exploiting CVE-2007-1270?

Exploitation of CVE-2007-1270 can lead to denial of service, leakage of sensitive information, or execution of arbitrary code.

Who is at risk from CVE-2007-1270?

Organizations using vulnerable versions of VMware ESX Server 3.0.0 and 3.0.1 are at risk from CVE-2007-1270.