CVE-2007-5671

CVE-2007-5671 describes a privilege escalation vulnerability in VMware products, specifically within the HGFS.sys driver of VMware Tools. This flaw allows a guest operating system user to modify arbitrary kernel memory locations, thereby gaining elevated privileges within the guest OS. The vulnerability affects various VMware products including Workstation, Player, ACE, Server, and ESX versions. With a CVSS score of 4.4 (AV:L/AC:M/Au:N/C:P/I:P/A:P), this vulnerability requires local access and moderate attack complexity, potentially leading to partial confidentiality, integrity, and availability impacts. While it allows for privilege escalation, it does not permit direct host compromise. There is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit or Nuclei. Community discussion and media coverage for this CVE are minimal, indicating a low level of public attention.