CVE-2007-5438 json
Unspecified vulnerability in a certain ActiveX control in Reconfig.DLL in VMware Workstation 5.5.x before 5.5.8 build 108000, VMware Workst…
published 2007-10-13 19 y ago modified 2026-06-16 4 mo ago also EUVD-2007-5414
- cvss
- 1.9
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.4%
- EPSS 0.4% chance of exploitation in 30 days, percentile 30%
- public exploits
- 0
- none known
Summary
Unspecified vulnerability in a certain ActiveX control in Reconfig.DLL in VMware Workstation 5.5.x before 5.5.8 build 108000, VMware Workstation 6.0.x before 6.0.5 build 109488, VMware Player 1.x before 1.0.8 build 108000, VMware Player 2.x before 2.0.5 build 109488, VMware ACE 1.x before 1.0.7 build 108880, VMware ACE 2.x before 2.0.5 build 109488, and VMware Server before 1.0.7 build 108231 might allow local users to cause a denial of service to the Virtual Disk Mount Service (vmount2.exe), related to the ConnectPopulatedDiskEx function.
Exploit prediction
0.37% chance of exploitation in the next 30 days, higher than 30% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 1.9 | AV:L/AC:M/Au:N/C:N/I:N/A:P |
Classification
- Weakness
-
- CWE-20 Improper Input Validation
References
-
secunia.com
/advisories/31709
third-party-advisory, vendor-advisory
-
secunia.com
/advisories/31710
third-party-advisory, vendor-advisory
-
secunia.com
/advisories/31707
third-party-advisory, vendor-advisory
-
secunia.com
/advisories/31708
third-party-advisory, vendor-advisory
-
vupen.com
/english/advisories/2008/2466
vdb-entry, vendor-advisory
-
osvdb.org
/43488
vdb-entry
-
securityreason.com
/securityalert/3219
third-party-advisory
- vmware.com /security/advisories/VMSA-2008-0014.html
- eleytt.com /advisories/eleytt_VMWARE1.pdf
- vmware.com /support/server/doc/releasenotes_server.html
- vmware.com /support/ace2/doc/releasenotes_ace2.html
-
securitytracker.com
/id?1020791
vdb-entry
- vmware.com /support/player2/doc/releasenotes_player2.html
-
securityfocus.com
/archive/1/482021/100/0/threaded
mailing-list
- vmware.com /support/ace/doc/releasenotes_ace.html
- vmware.com /support/player/doc/releasenotes_player.html
- vmware.com /support/ws6/doc/releasenotes_ws6.html
-
securityfocus.com
/bid/26025
vdb-entry
-
securityfocus.com
/archive/1/495869/100/0/threaded
mailing-list
-
lists.grok.org.uk
/pipermail/full-disclosure/2008-August/064118.html
mailing-list
- vmware.com /support/ws55/doc/releasenotes_ws55.html
Sources
- CVE List CVE-2007-5438
- NVD CVE-2007-5438
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.