CVE-2007-1337
First published: Wed May 02 2007(Updated: )
The virtual machine process (VMX) in VMware Workstation before 5.5.4 does not properly read state information when moving from the ACPI sleep state to the run state, which allows attackers to cause a denial of service (virtual machine reboot) via unknown vectors.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| VMware Workstation and ESXi | <=5.5.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html#554
- http://secunia.com/advisories/25079
- http://www.securitytracker.com/id?1018011
- http://www.securityfocus.com/bid/23732
- http://osvdb.org/35508
- http://www.vupen.com/english/advisories/2007/1592
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33990
- http://www.securityfocus.com/archive/1/469011/30/6510/threaded
- http://www.securityfocus.com/archive/1/467936/30/6690/threaded
Frequently Asked Questions
What is the severity of CVE-2007-1337?
CVE-2007-1337 has a medium severity rating due to its potential to cause a denial of service.
How do I fix CVE-2007-1337?
To fix CVE-2007-1337, upgrade VMware Workstation to version 5.5.4 or later.
What versions of VMware Workstation are affected by CVE-2007-1337?
VMware Workstation versions earlier than 5.5.4, specifically up to 5.5.3, are affected by CVE-2007-1337.
What type of attack does CVE-2007-1337 allow?
CVE-2007-1337 allows attackers to reboot the virtual machine, leading to a denial of service.
Does CVE-2007-1337 affect all VM configurations?
CVE-2007-1337 may affect any configuration using the vulnerable versions of VMware Workstation.
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/author
- agent/weakness
- agent/remedy
- agent/last-modified-date
- agent/severity
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/vmware
- canonical/vmware workstation and esxi
- version/vmware workstation and esxi/5.5.3