CVE-2007-2491: VMware Server

High severity, CVSS 7.2. EPSS: 0.3% chance of exploitation in the next 30 days.

The PIIX4 power management subsystem in EMC VMware Workstation 5.5.3.34685 and VMware Server 1.0.1.29996 allows local users to write to arbitrary memory locations via a crafted poke to I/O port 0x1004, triggering a denial of service (virtual machine crash) or other unspecified impact, a related issue to CVE-2007-1337.

Affected products

• VMware Server: version 1.0.1_build_29996 only
• VMware Workstation: version 5.5.3_build_34685 only

Published 2007-05-04. Last modified 2026-06-16.