VULNERABILITY INTELLIGENCE

CVE-2007-2491

CVSS score7.2 HIGH
EPSS probability0.30%
CISA KEVNot currently listed
Published2007-05-04
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:C/I:C/A:C

Description

The PIIX4 power management subsystem in EMC VMware Workstation 5.5.3.34685 and VMware Server 1.0.1.29996 allows local users to write to arbitrary memory locations via a crafted poke to I/O port 0x1004, triggering a denial of service (virtual machine crash) or other unspecified impact, a related issue to CVE-2007-1337.

Primary references