{"id":"CVE-2007-5618","aliases":["EUVD-2007-5590","GHSA-297c-8rmr-xrxf"],"status":"published","title":"Unquoted Windows search path vulnerability in the Authorization and other services in VMware...","description":"Unquoted Windows search path vulnerability in the Authorization and other services in VMware Player 1.0.x before 1.0.5 and 2.0 before 2.0.1, VMware Server before 1.0.4, and Workstation 5.x before 5.5.5 and 6.x before 6.0.1 might allow local users to gain privileges via malicious programs.","severity":{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00451,"percentile":0.3945,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2007-10-21T21:00:00Z","modified":"2026-06-16T22:46:30Z","products":[{"vendor":"vmware","product":"player"},{"vendor":"vmware","product":"server"},{"vendor":"vmware","product":"workstation"}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html","tags":["mailing-list","x_refsource_FULLDISC","x_transferred","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2007/3229","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Third Party Advisory"]},{"url":"http://www.vmware.com/support/server/doc/releasenotes_server.html","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"http://www.vmware.com/support/player2/doc/releasenotes_player2.html","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/26890","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Third Party Advisory"]},{"url":"http://www.vmware.com/support/player/doc/releasenotes_player.html","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28289","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/489739/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://lists.vmware.com/pipermail/security-announce/2008/000008.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Vendor Advisory"]},{"url":"http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0905/references","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Third Party Advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0005.html","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28276","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-5618"},{"url":"https://github.com/advisories/GHSA-297c-8rmr-xrxf"}],"sources":{"cve":[{"id":"CVE-2007-5618","description":"Unquoted Windows search path vulnerability in the Authorization and other services in VMware Player 1.0.x before 1.0.5 and 2.0 before 2.0.1, VMware Server before 1.0.4, and Workstation 5.x before 5.5.5 and 6.x before 6.0.1 might allow local users to gain privileges via malicious programs.","status":"published","published":"2007-10-21T21:00:00Z","modified":"2024-08-07T15:39:13.657Z","updated_at":"2026-11-02T13:32:00.617893Z"}],"euvd":[{"id":"EUVD-2007-5590","description":"Unquoted Windows search path vulnerability in the Authorization and other services in VMware Player 1.0.x before 1.0.5 and 2.0 before 2.0.1, VMware Server before 1.0.4, and Workstation 5.x before 5.5.5 and 6.x before 6.0.1 might allow local users to gain privileges via malicious programs.","status":"published","published":"2007-10-21T21:00:00Z","modified":"2024-08-07T15:39:13Z","updated_at":"2026-11-03T01:16:16.183984Z"}],"ghsa":[{"id":"GHSA-297c-8rmr-xrxf","title":"Unquoted Windows search path vulnerability in the Authorization and other services in VMware...","description":"Unquoted Windows search path vulnerability in the Authorization and other services in VMware Player 1.0.x before 1.0.5 and 2.0 before 2.0.1, VMware Server before 1.0.4, and Workstation 5.x before 5.5.5 and 6.x before 6.0.1 might allow local users to gain privileges via malicious programs.","status":"published","published":"2022-05-01T18:35:01Z","modified":"2023-01-31T05:05:05Z","updated_at":"2026-11-02T14:48:47.205764Z"}],"nvd":[{"id":"CVE-2007-5618","description":"Unquoted Windows search path vulnerability in the Authorization and other services in VMware Player 1.0.x before 1.0.5 and 2.0 before 2.0.1, VMware Server before 1.0.4, and Workstation 5.x before 5.5.5 and 6.x before 6.0.1 might allow local users to gain privileges via malicious programs.","status":"published","published":"2007-10-21T21:17:00Z","modified":"2026-06-16T22:46:30.367Z","cvss":[{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:01:22.203764Z"}]}}