← Vulnerability feed

Vulnerability record · CVE-2007-1270 · published 6 April 2007

CVE-2007-1270: Vmware esx server vulnerability

Vmware · Esx Server

Double free vulnerability in VMware ESX Server 3.0.0 and 3.0.1 allows attackers to cause a denial of service (crash), obtain sensitive information, or possibly execute arbitrary code via unspecified vectors.

5.0 CVSS 2.0 Medium EPSS 2.6% · top 15.1% CWE-189 · CWE-189
5.0CVSS 2.0 base score
2.6%EPSS exploitation probability, 30 days
NoNot in CISA KEV
2Affected product versions listed by NVD
20References
16 Jun 2026Last modified by NVD

Description

Double free vulnerability in VMware ESX Server 3.0.0 and 3.0.1 allows attackers to cause a denial of service (crash), obtain sensitive information, or possibly execute arbitrary code via unspecified vectors.

AV:N/AC:L/Au:N/C:N/I:P/A:N

Affected products

2 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://osvdb.org/35268
http://secunia.com/advisories/24788 Vendor Advisory
http://securityreason.com/securityalert/2524
http://www.securityfocus.com/archive/1/464745/100/0/threaded
http://www.securityfocus.com/bid/23323
http://www.securitytracker.com/id?1017875
http://www.vmware.com/support/vi3/doc/esx-5754280-patch.html
http://www.vmware.com/support/vi3/doc/esx-6431040-patch.html
http://www.vupen.com/english/advisories/2007/1267
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5463
http://osvdb.org/35268
http://secunia.com/advisories/24788 Vendor Advisory
http://securityreason.com/securityalert/2524
http://www.securityfocus.com/archive/1/464745/100/0/threaded
http://www.securityfocus.com/bid/23323
http://www.securitytracker.com/id?1017875
http://www.vmware.com/support/vi3/doc/esx-5754280-patch.html
http://www.vmware.com/support/vi3/doc/esx-6431040-patch.html
http://www.vupen.com/english/advisories/2007/1267
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5463

Track CVE-2007-1270 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2014-7169GNU Bash environment variable function parsing command injection (Shellshock variant)GNU Bash through 4.3 bash43-025 processes trailing strings after malformed function definitions in environment variable values, allowing command inje…KEVEPSS 100%analysed9.8CVE-2014-6271GNU Bash environment variable command injection (ShellShock)GNU Bash through 4.3 processes trailing strings after function definitions in environment variable values, allowing injected commands to run when Bas…KEVEPSS 100%analysed10.0CVE-2013-1405Vmware vcenter server improper authentication vulnerabilityVMware vCenter Server 4.0 before Update 4b and 4.1 before Update 3a, VMware VirtualCenter 2.5, VMware vSphere Client 4.0 before Update 4b and 4.1 bef…EPSS 2.8%10.0CVE-2007-0061Vmware ace memory buffer overflow vulnerabilityThe DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Player 2 bef…EPSS 6.5%10.0CVE-2007-0063Vmware ace vulnerabilityInteger underflow in the DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 5…EPSS 20%9.9CVE-2012-1516Vmware esx memory buffer overflow vulnerabilityThe VMX process in VMware ESXi 3.5 through 4.1 and ESX 3.5 through 4.1 does not properly handle RPC commands, which allows guest OS users to cause a …EPSS 3.2%9.4CVE-2013-3658Vmware esx path traversal vulnerabilityDirectory traversal vulnerability in VMware ESXi 4.0 through 5.0, and ESX 4.0 and 4.1, allows remote attackers to delete arbitrary host OS files via …EPSS 3.7%9.3CVE-2012-3288Vmware workstation improper input validation vulnerabilityVMware Workstation 7.x before 7.1.6 and 8.x before 8.0.4, VMware Player 3.x before 3.1.6 and 4.x before 4.0.4, VMware Fusion 4.x before 4.1.3, VMware…EPSS 3.8%

Source: NIST National Vulnerability Database (record CVE-2007-1270), CISA KEV, FIRST EPSS (scores of 2026-10-07). This page is refreshed as NVD updates the record.