CVE-2006-6410

CVE-2006-6410 describes a buffer overflow vulnerability in an ActiveX control within VMWare Workstation version 5.5.1. This flaw allows a local attacker to execute arbitrary code by supplying an excessively long VmdbDb parameter to the Initialize function. With a CVSS score of 4.6, it presents a low attack complexity and requires local access, potentially leading to partial confidentiality, integrity, and availability compromise. While not listed in CISA's KEV catalog, an exploit is publicly available on ExploitDB, though there is no evidence of active exploitation, Metasploit modules, or significant community discussion or media coverage.