CVE-2007-0061: canonical ubuntu_linux
Vulnerability summary
CVE-2007-0061 is a high (CVSS 10.0) vulnerability in canonical ubuntu_linux. EPSS estimates a 6.50% chance of exploitation in the next 30 days, higher than 93.6% of scored vulnerabilities.
Timeline
- 21-09-2007PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
The DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Player 2 before 2.0.1 Build 55017, ACE before 1.0.3 Build 54075 and ACE 2 before 2.0.1 Build 55017, and Server before 1.0.4 Build 56528 allows remote attackers to execute arbitrary code via a malformed packet that triggers "corrupt stack memory."
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
6.50%
Chance of exploitation in the next 30 days
Percentile
94%
Versus all other CVEs
30-day change
0.00 pp
From 6.50% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Vmware5 products
- ace≥ 1.0, < 1.0.3 | ≥ 2.0, < 2.0.1
- esx2.0.2 | 2.1.3 | 2.5.3 | 2.5.4 | 3.0.0 | 3.0.1
- player≥ 1.0, < 1.0.5 | ≥ 2.0, < 2.0.1
- server≥ 1.0, < 1.0.4
- workstation≥ 5.5, < 5.5.5 | ≥ 6.0, < 6.0.1
Canonical1 product
- ubuntu_linuxEOL6.06 | 6.10 | 7.04
2 vendors · 6 products
References
18 links- lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.htmlMailing ListX Refsource FULLDISCThird Party Advisory