CVE-2007-4059

Published: Jul 30, 2007

Modified: Aug 7, 2024

PUBLISHED

Description

Absolute path traversal vulnerability in a certain ActiveX control in IntraProcessLogging.dll 5.5.3.42958 in EMC VMware allows remote attackers to create or overwrite arbitrary files via a full pathname in the argument to the SetLogFileName method.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

20070920 VMSA-2007-0006 Critical security updates for all supported versions of VMware ESX Server, VMware Server, VMware Workstation, VMware ACE, and VMware Player

mailing-list

x_refsource_FULLDISC

ADV-2007-3229

vdb-entry

x_refsource_VUPEN

25110

vdb-entry

x_refsource_BID

4240

exploit

x_refsource_EXPLOIT-DB

http://www.vmware.com/support/server/doc/releasenotes_server.html

x_refsource_CONFIRM

http://www.vmware.com/support/player2/doc/releasenotes_player2.html

x_refsource_CONFIRM

26890

third-party-advisory

x_refsource_SECUNIA

http://www.vmware.com/support/ace/doc/releasenotes_ace.html

x_refsource_CONFIRM

http://www.vmware.com/support/player/doc/releasenotes_player.html

x_refsource_CONFIRM

http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html

x_refsource_CONFIRM

http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html

x_refsource_CONFIRM

vmware-intraprocesslogging-file-overwrite(35675)

vdb-entry

x_refsource_XF

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2007-4059

Description

Affected Products

References