CVE-2007-0063

Integer underflow in the DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x...

10.0 HighFix available

Integer underflow in the DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Player 2 before 2.0.1 Build 55017, ACE before 1.0.3 Build 54075 and ACE 2 before 2.0.1 Build 55017, and Server before 1.0.4 Build 56528 allows remote attackers to execute arbitrary code via a malformed DHCP packet that triggers a stack-based buffer overflow.

Exploit likelihood

20.4%Up 8.2 points since Feb 4, 2022

What each source reports

NVD Score used 10.0

Record: CVE-2007-0063
CVSS 2.0: 10.0 HighAV:N/AC:L/Au:N/C:C/I:C/A:C
Weakness: CWE-191
Updated: 2026-11-02

CVE List No score

Record: CVE-2007-0063
Updated: 2026-11-02

EUVDEUVD-2007-0067 No score

Record: EUVD-2007-0067
Updated: 2026-11-03

GitHub AdvisoriesGHSA-wpv6-5q5m-qph7 No score

Integer underflow in the DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x...

Record: GHSA-wpv6-5q5m-qph7
Weakness: CWE-191
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`dhcp` Red Hat:enterprise_linux:2.1::as	before 1:2.0pl5-11	1:2.0pl5-11
`dhcp` Red Hat:enterprise_linux:2.1::aw	before 1:2.0pl5-11	1:2.0pl5-11
`dhcp` Red Hat:enterprise_linux:2.1::es	before 1:2.0pl5-11	1:2.0pl5-11

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2007-0063 is a high vulnerability (CVSS 10.0) in Vmware Ace, published September 21, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 20.4%, the 97th percentile. Fixed in dhcp 1:2.0pl5-11.

References

Show 24 moreShow less