CVE-2006-3547

CVE-2006-3547 describes a denial-of-service vulnerability in EMC VMware Player, where a user-assisted attacker can trigger an unrecoverable application failure by providing an excessively long value for the ide1:0.fileName parameter within a virtual machine's .vmx file. This issue has a CVSS score of 5.5 (Medium), indicating a local attack vector with low complexity, requiring low privileges, and resulting in high availability impact. Despite the potential for denial of service, third parties have noted that write access to the .vmx file inherently allows other methods of disrupting the virtual machine, suggesting no privilege escalation occurs. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.