© 2026 vulntracker.io

CVE-2007-5023

N/A

Published: September 21, 2007 at 06:00 PM UTC

Updated: June 16, 2026 at 10:45 PM UTC

5 products affected across 2 vendorsUbuntu LinuxWorkstationPlayer

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 0.3%

Description

Unquoted Windows search path vulnerability in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Player 2 before 2.0.1 Build 55017, ACE before 1.0.3 Build 54075, and Server before 1.0.4 Build 56528 allows local users to gain privileges via unspecified vectors, possibly involving a malicious "program.exe" file in the C: folder.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Ubuntu Linux · Canonicalrubygems

95%

95%

1.0 ≤ v ≤ 1.0.3

Player · VMware

95%

1.0.0 ≤ v ≤ 1.0.52.0 ≤ v ≤ 2.0.1

Server · VMware

95%

1.0 ≤ v ≤ 1.0.4

Workstation · VMware

95%

5 ≤ v ≤ 5.5.56.0 ≤ v ≤ 6.0.1

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (7)

VDB Entryx_refsource_BIDPatchThird Party Advisory

Source: [email protected]

http://www.securityfocus.com/bid/25732

x_refsource_CONFIRMPatchVendor Advisory

Source: [email protected]

http://www.vmware.com/support/ace/doc/releasenotes_ace.html

x_refsource_CONFIRMPatchVendor Advisory

Source: [email protected]

http://www.vmware.com/support/player/doc/releasenotes_player.html

x_refsource_CONFIRMPatchVendor Advisory

Source: [email protected]

http://www.vmware.com/support/player2/doc/releasenotes_player2.html

x_refsource_CONFIRMPatchVendor Advisory

Source: [email protected]

http://www.vmware.com/support/server/doc/releasenotes_server.html

x_refsource_CONFIRMPatchVendor Advisory

Source: [email protected]

http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html

x_refsource_CONFIRMPatchVendor Advisory

Source: [email protected]

http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html

CVSS

6.9MEDIUM[email protected]

Confidentiality: COMPLETE
Integrity: COMPLETE
Availability: COMPLETE

Vector?

Quick Info

StatusMODIFIED

CWE

CWE-264

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create account Sign in

Free plan, no card