Unspecified vulnerability in VMware Player 1.0.x before 1.0.5 and 2.0 before 2.0.1, and Workstation 5.x before 5.5.5 and 6.x before 6.0.1, prevents it from launching, which has unspecified impact, related to untrusted virtual machine images.

The remote host is affected by the vulnerability described in GLSA-200711-23 (VMware Workstation and Player: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in several VMware     products. Neel Mehta and Ryan Smith (IBM ISS X-Force) discovered that     the DHCP server contains an integer overflow vulnerability     (CVE-2007-0062), an integer underflow vulnerability (CVE-2007-0063) and     another error when handling malformed packets (CVE-2007-0061), leading     to stack-based buffer overflows or stack corruption. Rafal Wojtczvk     (McAfee) discovered two unspecified errors that allow authenticated     users with administrative or login privileges on a guest operating     system to corrupt memory or cause a Denial of Service (CVE-2007-4496,     CVE-2007-4497). Another unspecified vulnerability related to untrusted     virtual machine images was discovered (CVE-2007-5617).
    VMware products also shipped code copies of software with several     vulnerabilities: Samba (GLSA-200705-15), BIND (GLSA-200702-06), MIT     Kerberos 5 (GLSA-200707-11), Vixie Cron (GLSA-200704-11), shadow     (GLSA-200606-02), OpenLDAP (CVE-2006-4600), PAM (CVE-2004-0813,     CVE-2007-1716), GCC (CVE-2006-3619) and GDB (CVE-2006-4146).
  Impact :

    Remote attackers within a guest system could possibly exploit these     vulnerabilities to execute code on the host system with elevated     privileges or to cause a Denial of Service.
  Workaround :

    There is no known workaround at this time.

Neel Mehta and Ryan Smith discovered that the VMware Player DHCP server did not correctly handle certain packet structures. Remote attackers could send specially crafted packets and gain root privileges. (CVE-2007-0061, CVE-2007-0062, CVE-2007-0063)

Rafal Wojtczvk discovered multiple memory corruption issues in VMware Player. Attackers with administrative privileges in a guest operating system could cause a denial of service or possibly execute arbitrary code on the host operating system. (CVE-2007-4496, CVE-2007-4497).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
28262	GLSA-200711-23 : VMware Workstation and Player: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	critical
28250	Ubuntu 6.06 LTS / 6.10 / 7.04 : linux-restricted-modules-2.6.17/20, vmware-player-kernel-2.6.15 vulnerabilities (USN-543-1)	Nessus	Ubuntu Local Security Checks	critical

Detections

Analytics

CVE-2007-5617

critical

Tenable Plugins

critical

critical