CVE-2007-0063: canonical ubuntu_linux Integer Underflow (Wrap or Wraparound)
Vulnerability summary
CVE-2007-0063 is a high (CVSS 10.0) Integer Underflow (Wrap or Wraparound) vulnerability in canonical ubuntu_linux. EPSS estimates a 20.41% chance of exploitation in the next 30 days, higher than 97.4% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 1Timeline
- 21-09-2007PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
Integer underflow in the DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Player 2 before 2.0.1 Build 55017, ACE before 1.0.3 Build 54075 and ACE 2 before 2.0.1 Build 55017, and Server before 1.0.4 Build 56528 allows remote attackers to execute arbitrary code via a malformed DHCP packet that triggers a stack-based buffer overflow.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
20.41%
Chance of exploitation in the next 30 days
Percentile
97%
Versus all other CVEs
30-day change
0.00 pp
From 20.41% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Vmware5 products
- ace≥ 1.0, < 1.0.3 | ≥ 2.0, < 2.0.1
- esx2.0.2 | 2.1.3 | 2.5.3 | 2.5.4 | 3.0.0 | 3.0.1
- player≥ 1.0, < 1.0.5 | ≥ 2.0, < 2.0.1
- server≥ 1.0, < 1.0.4
- workstation≥ 5.5, < 5.5.5 | ≥ 6.0, < 6.0.1
Canonical1 product
- ubuntu_linuxEOL6.06 | 6.10 | 7.04
2 vendors · 6 products
References
18 links- lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.htmlMailing ListX Refsource FULLDISCThird Party Advisory