CVE-2007-0063 in the critical feed json
Integer underflow in the DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0…
published 2007-09-21 19 y ago modified 2026-06-16 4 mo ago also EUVD-2007-0067
- cvss
- 10.0
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 20.4%
- EPSS 20.4% chance of exploitation in 30 days, percentile 97%
- public exploits
- 0
- none known
Summary
Integer underflow in the DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Player 2 before 2.0.1 Build 55017, ACE before 1.0.3 Build 54075 and ACE 2 before 2.0.1 Build 55017, and Server before 1.0.4 Build 56528 allows remote attackers to execute arbitrary code via a malformed DHCP packet that triggers a stack-based buffer overflow.
Patch / fix
- vmware ace 1.0.3, 2.0.1
- vmware player 1.0.5, 2.0.1
- vmware server 1.0.4
- vmware workstation 5.5.5, 6.0.1
- dhcp RHEL 2.1 1:2.0pl5-11
red hat advisories RHSA-2007:0970
- securityfocus.com/bid/25729 advisory
- iss.net/threats/275.html advisory
- vmware.com/support/server/doc/releasenotes_server.html advisory
- vmware.com/support/ace2/doc/releasenotes_ace2.html advisory
- vmware.com/support/player2/doc/releasenotes_player2.html advisory
- vmware.com/support/ace/doc/releasenotes_ace.html advisory
- vmware.com/support/player/doc/releasenotes_player.html advisory
- vmware.com/support/ws6/doc/releasenotes_ws6.html advisory
- vmware.com/support/ws55/doc/releasenotes_ws55.html advisory
Vendor advisories
What the vendors themselves say about their products: affected, fixed or not affected, and what to do.
red hat product security vex CVE-2007-0063 updated
security flaw
-
Red Hat Enterprise Linux AS (Advanced Server) version 2.1 dhcp 2.0pl5-11 Red Hat Enterprise Linux ES version 2.1 dhcp 2.0pl5-11 Red Hat Linux Advanced Workstation 2.1 dhcp 2.0pl5-11fixed: vendor fix RHSA-2007:0970
Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf
Exploit prediction
20.41% chance of exploitation in the next 30 days, higher than 97% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 10.0 | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Classification
- Weakness
-
- CWE-191 Integer Underflow (Wrap or Wraparound)
- Technology feeds
References
-
securityfocus.com
/bid/25729
vdb-entry, patch, third-party-advisory
-
iss.net
/threats/275.html
third-party-advisory, patch
-
vmware.com
/support/server/doc/releasenotes_server.html
patch, vendor-advisory
-
vmware.com
/support/ace2/doc/releasenotes_ace2.html
patch, vendor-advisory
-
vmware.com
/support/player2/doc/releasenotes_player2.html
patch, vendor-advisory
-
vmware.com
/support/ace/doc/releasenotes_ace.html
patch, vendor-advisory
-
vmware.com
/support/player/doc/releasenotes_player.html
patch, vendor-advisory
-
vmware.com
/support/ws6/doc/releasenotes_ws6.html
patch, vendor-advisory
-
vmware.com
/support/ws55/doc/releasenotes_ws55.html
patch, vendor-advisory
-
security.gentoo.org
/glsa/glsa-200711-23.xml
vendor-advisory, third-party-advisory
-
ubuntu.com
/usn/usn-543-1
vendor-advisory, third-party-advisory
-
lists.grok.org.uk
/pipermail/full-disclosure/2007-September/065902.html
mailing-list, third-party-advisory
-
exchange.xforce.ibmcloud.com
/vulnerabilities/33103
vdb-entry, third-party-advisory
-
securitytracker.com
/id?1018717
vdb-entry, third-party-advisory
-
vupen.com
/english/advisories/2007/3229
vdb-entry, third-party-advisory
-
secunia.com
/advisories/27694
third-party-advisory
-
secunia.com
/advisories/26890
third-party-advisory
-
secunia.com
/advisories/27706
third-party-advisory
Sources
- CVE List CVE-2007-0063
- NVD CVE-2007-0063
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.