Executive Summary
| Informations | |||
|---|---|---|---|
| Name | CVE-2006-3547 | First vendor Publication | 2006-07-12 |
| Vendor | Cve | Last vendor Modification | 2025-01-17 |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:N/AC:H/Au:N/C:N/I:N/A:P) | |||
|---|---|---|---|
| Cvss Base Score | 2.6 | Attack Range | Network |
| Cvss Impact Score | 2.9 | Attack Complexity | High |
| Cvss Expoit Score | 4.9 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| EMC VMware Player allows user-assisted attackers to cause a denial of service (unrecoverable application failure) via a long value of the ide1:0.fileName parameter in the .vmx file of a virtual machine. NOTE: third parties have disputed this issue, saying that write access to the .vmx file enables other ways of stopping the virtual machine, so no privilege boundaries are crossed |
Original Source
| Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3547 |
CPE : Common Platform Enumeration
| Type | Description | Count |
|---|---|---|
| Application | 1 |
Open Source Vulnerability Database (OSVDB)
| Id | Description |
|---|---|
| 27524 | VMware Player .vmx ide1:0.fileName Parameter Overflow DoS EMC VMware Player contains a flaw that may allow a local denial of service. The issue is triggered when a user loads a .vmx file containing an ide1:0.fileName parameter with an overly long value, and will result in loss of availability for the the VMware instace. However, for an attacker to gain access and edit the .vmx file, it would require a level of access that would allow a wide variety of attacks. This level of access is considered to be trusted and not readily available to someone looking to launch this type of attack. |
Sources (Detail)
Alert History
| Date | Informations |
|---|---|
| 2025-01-17 17:21:04 |
|
| 2024-11-28 23:20:01 |
|
| 2024-11-28 12:09:28 |
|
| 2024-08-08 00:28:41 |
|
| 2024-05-17 09:28:44 |
|
| 2024-05-14 21:28:31 |
|
| 2024-04-11 09:28:47 |
|
| 2024-03-21 09:28:50 |
|
| 2023-11-07 21:48:03 |
|
| 2021-05-04 12:04:18 |
|
| 2021-04-22 01:04:56 |
|
| 2020-05-23 00:18:04 |
|
| 2018-10-18 21:20:14 |
|
| 2016-06-28 15:52:21 |
|
| 2013-05-11 11:03:04 |
|
