CVE-2007-5618: VMware Player

High severity, CVSS 7.2. EPSS: 0.5% chance of exploitation in the next 30 days.

Unquoted Windows search path vulnerability in the Authorization and other services in VMware Player 1.0.x before 1.0.5 and 2.0 before 2.0.1, VMware Server before 1.0.4, and Workstation 5.x before 5.5.5 and 6.x before 6.0.1 might allow local users to gain privileges via malicious programs.

Affected products

• VMware Player: from 1.0.0, before 1.0.5 (fixed in 1.0.5); from 2.0, before 2.0.1 (fixed in 2.0.1)
• VMware Server: before 1.0.4 (fixed in 1.0.4)
• VMware Workstation: from 5.5, before 5.5.5 (fixed in 5.5.5); from 6.0, before 6.0.1 (fixed in 6.0.1)

Published 2007-10-21. Last modified 2026-06-16.