CVE-2007-0063

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 20.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-09-21 · updated 2026-06-16
Weakness: CWE-191

Description

Integer underflow in the DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Player 2 before 2.0.1 Build 55017, ACE before 1.0.3 Build 54075 and ACE 2 before 2.0.1 Build 55017, and Server before 1.0.4 Build 56528 allows remote attackers to execute arbitrary code via a malformed DHCP packet that triggers a stack-based buffer overflow.

Affected products

Canonical Ubuntu Linux: 6.06, 6.10, 7.04
VMware Ace: from 1.0 before 1.0.3; from 2.0 before 2.0.1 — fixed in 1.0.3, 2.0.1
VMware ESX: 2.0.2, 2.1.3, 2.5.3, 2.5.4, 3.0.0, 3.0.1
VMware Player: from 1.0 before 1.0.5; from 2.0 before 2.0.1 — fixed in 1.0.5, 2.0.1
VMware Server: from 1.0 before 1.0.4 — fixed in 1.0.4
VMware Workstation: from 5.5 before 5.5.5; from 6.0 before 6.0.1 — fixed in 5.5.5, 6.0.1

How to fix

Upgrade to a fixed version: VMware Ace 1.0.3, 2.0.1; VMware Player 1.0.5, 2.0.1; VMware Server 1.0.4; VMware Workstation 5.5.5, 6.0.1. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2007-0063 or the next vulnerability affects your stack