Vulnerabilities
Misconfiguration
Compliance
CVE Vulnerabilities

CVE-2007-0063

Integer Underflow (Wrap or Wraparound)

Published: Sep 21, 2007 | Modified: Apr 09, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
10 HIGH
AV:N/AC:L/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu
MEDIUM
Vulnerability-free packages from our partners
root.io logo minimus.io logo echo.ai logo
Additional information
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2007-0063
CWEhttps://cwe.mitre.org/data/definitions/191.html

Integer underflow in the DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Player 2 before 2.0.1 Build 55017, ACE before 1.0.3 Build 54075 and ACE 2 before 2.0.1 Build 55017, and Server before 1.0.4 Build 56528 allows remote attackers to execute arbitrary code via a malformed DHCP packet that triggers a stack-based buffer overflow.

Weakness

The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result.

Affected Software

NameVendorStart VersionEnd Version
AceVmware1.0 (including)1.0.3 (excluding)
AceVmware2.0 (including)2.0.1 (excluding)
PlayerVmware1.0 (including)1.0.5 (excluding)
PlayerVmware2.0 (including)2.0.1 (excluding)
ServerVmware1.0 (including)1.0.4 (excluding)
WorkstationVmware5.5 (including)5.5.5 (excluding)
WorkstationVmware6.0 (including)6.0.1 (excluding)
EsxVmware2.0.2 (including)2.0.2 (including)
EsxVmware2.1.3 (including)2.1.3 (including)
EsxVmware2.5.3 (including)2.5.3 (including)
EsxVmware2.5.4 (including)2.5.4 (including)
EsxVmware3.0.0 (including)3.0.0 (including)
EsxVmware3.0.1 (including)3.0.1 (including)
Red Hat Enterprise Linux 2.1RedHatdhcp-1:2.0pl5-11*
Linux-restricted-modules-2.6.17Ubuntuedgy*
Linux-restricted-modules-2.6.17Ubuntuupstream*
Linux-restricted-modules-2.6.20Ubuntufeisty*
Linux-restricted-modules-2.6.20Ubuntuupstream*
Vmware-playerUbuntuupstream*
Vmware-player-kernel-2.6.15Ubuntudapper*
Vmware-player-kernel-2.6.15Ubuntuupstream*
Vmware-serverUbuntufeisty*
Vmware-serverUbuntugutsy*
Vmware-serverUbuntuupstream*

References

Aqua Security is the largest pure-play cloud native security company, providing customers the freedom to innovate and run their businesses with minimal friction. The Aqua Cloud Native Security Platform provides prevention, detection, and response automation across the entire application lifecycle to secure the build, secure cloud infrastructure and secure running workloads wherever they are deployed.
Copyright © 2026 Aqua Security Software Ltd.   Privacy Policy | Terms of Use