CVE-2007-1271: vmware esx

EPSS trend

Probability

0.36%

Chance of exploitation in the next 30 days

Percentile

28%

Versus all other CVEs

30-day change

0.00 pp

From 0.36% on 18-09-2026

18-09-202618-10-2026

EPSS score

0.36%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

9 links

www.securitytracker.com/id?1017875VDB EntryX Refsource SECTRACK
www.securityfocus.com/bid/23322VDB EntryX Refsource BIDPatchVendor Advisory
www.securityfocus.com/archive/1/464745/100/0/threadedMailing ListX Refsource BUGTRAQ
www.vupen.com/english/advisories/2007/1267VDB EntryX Refsource VUPEN
www.vmware.com/support/vi3/doc/esx-6431040-patch.htmlX Refsource CONFIRMPatch
secunia.com/advisories/24788Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5552VDB EntrySignatureX Refsource OVAL
www.vmware.com/support/vi3/doc/esx-5754280-patch.htmlX Refsource CONFIRMPatch
securityreason.com/securityalert/2524Third Party AdvisoryX Refsource SREASON

Related vulnerabilities

CVE-2003-1291vmwareesx0.34%20y ago01-02-2006 20:00VMware ESX Server 1.5.2 before Patch 4 allows local users to execute arbitrary programs as root via certain modified VMware ESX Server environment variables.CVE-2013-1405vmwareesx+52.80%13y ago15-02-2013 11:00VMware vCenter Server 4.0 before Update 4b and 4.1 before Update 3a, VMware VirtualCenter 2.5, VMware vSphere Client 4.0 before Update 4b and 4.1 before Update 3a, VMware VI-Client 2.5, VMware ESXi 3.5 through 4.1, and VMware ESX 3.5 through 4.1 do not properly implement the management authentication protocol, which allow remote servers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.CVE-2007-1270vmwareesx+12.60%19y ago06-04-2007 00:00Double free vulnerability in VMware ESX Server 3.0.0 and 3.0.1 allows attackers to cause a denial of service (crash), obtain sensitive information, or possibly execute arbitrary code via unspecified vectors.CVE-2007-0063canonicalubuntu_linux+520.41%19y ago21-09-2007 18:00Integer underflow in the DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Player 2 before 2.0.1 Build 55017, ACE before 1.0.3 Build 54075 and ACE 2 before 2.0.1 Build 55017, and Server before 1.0.4 Build 56528 allows remote attackers to execute arbitrary code via a malformed DHCP packet that triggers a stack-based buffer overflow.CVE-2007-0061canonicalubuntu_linux+56.50%19y ago21-09-2007 18:00The DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Player 2 before 2.0.1 Build 55017, ACE before 1.0.3 Build 54075 and ACE 2 before 2.0.1 Build 55017, and Server before 1.0.4 Build 56528 allows remote attackers to execute arbitrary code via a malformed packet that triggers "corrupt stack memory."CVE-2007-5671vmwareace+80.39%18y ago05-06-2008 20:21HGFS.sys in the VMware Tools package in VMware Workstation 5.x before 5.5.6 build 80404, VMware Player before 1.0.6 build 80404, VMware ACE before 1.0.5 build 79846, VMware Server before 1.0.5 build 80187, and VMware ESX 2.5.4 through 3.0.2 does not properly validate arguments in user-mode METHOD_NEITHER IOCTLs to the \\.\hgfs device, which allows guest OS users to modify arbitrary memory locations in guest kernel memory and gain privileges.

All vulnerabilities inesx

CVE-2007-1271: vmware esx

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References