CVE-2007-0063
NoneCVSS
—
EPSS
20.4%
Published
Sep 21, 2007
CISA due date
—
The record
Integer underflow in the DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Player 2 before 2.0.1 Build 55017, ACE before 1.0.3 Build 54075 and ACE 2 before 2.0.1 Build 55017, and Server before 1.0.4 Build 56528 allows remote attackers to execute arbitrary code via a malformed DHCP packet that triggers a stack-based buffer overflow.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Red Hat:enterprise_linux:2.1::as | dhcp | 0 | 1:2.0pl5-11 |
| Red Hat:enterprise_linux:2.1::aw | dhcp | 0 | 1:2.0pl5-11 |
| Red Hat:enterprise_linux:2.1::es | dhcp | 0 | 1:2.0pl5-11 |
Related vulnerabilities
- CVE-2007-5365 Stack-based buffer overflow in the cons_options function in options.c in dhcpd in OpenBSD… Also affects dhcp
- CVE-2026-44235 rabbitmq-c is a C-language AMQP client library for RabbitMQ. CWE-191
- CVE-2026-62289 libheif is a HEIF and AVIF file format decoder and encoder. CWE-191
- CVE-2026-16241 Integer underflow in PostgreSQL ECPG allows a database server administrator to achieve… CWE-191
- CVE-2026-18839 An integer underflow was found in the popt library when formatting help text for option… CWE-191
- CVE-2026-54345 gopacket provides packet processing capabilities for Go. CWE-191
- CVE-2026-66033 libssh2 through 1.11.1, fixed in commit a2ed82d, contains a pre-authentication integer… CWE-191
- CVE-2026-65704 FFmpeg through 8.1.2 contains an out-of-bounds write vulnerability that allows attackers… CWE-191