CVE-2007-0063
NoneCVSS
—
EPSS
20.4%
Published
Sep 21, 2007
CISA due date
—
The record
Integer underflow in the DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Player 2 before 2.0.1 Build 55017, ACE before 1.0.3 Build 54075 and ACE 2 before 2.0.1 Build 55017, and Server before 1.0.4 Build 56528 allows remote attackers to execute arbitrary code via a malformed DHCP packet that triggers a stack-based buffer overflow.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Red Hat:enterprise_linux:2.1::as | dhcp | 0 | 1:2.0pl5-11 |
| Red Hat:enterprise_linux:2.1::aw | dhcp | 0 | 1:2.0pl5-11 |
| Red Hat:enterprise_linux:2.1::es | dhcp | 0 | 1:2.0pl5-11 |
Related vulnerabilities
- CVE-2007-5365 Stack-based buffer overflow in the cons_options function in options.c in dhcpd in OpenBSD… Also affects dhcp
- CVE-2026-88833 A flaw was found in BusyBox's udhcpc DHCP client. CWE-191
- CVE-2026-44235 rabbitmq-c is a C-language AMQP client library for RabbitMQ. CWE-191
- CVE-2026-81977 Acrobat Reader is affected by an Integer Underflow (Wrap or Wraparound) vulnerability… CWE-191
- CVE-2026-66767 SAP NetWeaver Application Server for ABAP and ABAP Platform allows an unauthenticated… CWE-191
- CVE-2026-18341 IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to corrupt… CWE-191
- CVE-2026-9624 A denial-of-service security issue exists within RSLinx® Classic. CWE-191
- CVE-2026-9622 A denial-of-service security issue exists within RSLinx® Classic. CWE-191