CVE-2007-4155

CRITICAL 9.3CVE-2007-4155 · Published 03/08/2007 · updated 16/06/2026

In short

CVE-2007-4155 is a CRITICAL (CVSS 9.3) vulnerability affecting vmware (emc).
Chance of exploitation in the next 30 days (EPSS): 9.6%, higher than 95.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
vmware emc	`= 6.0.0`	No fix yet

Description

Absolute path traversal vulnerability in a certain ActiveX control in vielib.dll in EMC VMware 6.0.0 allows remote attackers to execute arbitrary local programs via a full pathname in the first two arguments to the (1) CreateProcess or (2) CreateProcessEx method.

References

lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html
secunia.com/advisories/26890
securityfocus.com/bid/25131
securitytracker.com/id
vmware.com/support/ace/doc/releasenotes_ace.html
vmware.com/support/ace2/doc/releasenotes_ace2.html
vmware.com/support/player/doc/releasenotes_player.html
vmware.com/support/player2/doc/releasenotes_player2.html
vmware.com/support/server/doc/releasenotes_server.html
vmware.com/support/ws55/doc/releasenotes_ws55.html
vmware.com/support/ws6/doc/releasenotes_ws6.html
vupen.com/english/advisories/2007/3229
exchange.xforce.ibmcloud.com/vulnerabilities/35670

More vulnerabilities in vmware

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free