CVE-2007-2491

Severity: high (CVSS 7.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-05-04 · updated 2026-06-16

Description

The PIIX4 power management subsystem in EMC VMware Workstation 5.5.3.34685 and VMware Server 1.0.1.29996 allows local users to write to arbitrary memory locations via a crafted poke to I/O port 0x1004, triggering a denial of service (virtual machine crash) or other unspecified impact, a related issue to CVE-2007-1337.

Affected products

VMware Server: 1.0.1_build_29996
VMware Workstation: 5.5.3_build_34685

References

http://osvdb.org/40088
http://taviso.decsystem.org/virtsec.pdf
http://www.vupen.com/english/advisories/2007/1592
http://osvdb.org/40088
http://taviso.decsystem.org/virtsec.pdf
http://www.vupen.com/english/advisories/2007/1592

Get alerted when CVE-2007-2491 or the next vulnerability affects your stack