CVE-2007-2491 describes a critical vulnerability in the PIIX4 power management subsystem of EMC VMware Workstation 5.5.3.34685 and VMware Server 1.0.1.29996. A local attacker can exploit this by crafting a poke to I/O port 0x1004, enabling writes to arbitrary memory locations. This can lead to a denial of service (virtual machine crash) or other unspecified impacts, with a CVSS score of 7.2 indicating high severity. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
1.0.1_build_29996CPE matchmatch criteria | cpe:2.3:a:vmware:server:1.0.1_build_29996:*:*:*:*:*:*:* | ||
5.5.3_build_34685CPE matchmatch criteria | cpe:2.3:a:vmware:workstation:5.5.3_build_34685:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:L/AC:L/Au:N/C:C/I:C/A:C
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.5 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.