TI-2006-03439 Aliases CVE-2006-3547 GHSA-24gw-9fv3-3c2w

EMC VMware Player allows user-assisted attackers to cause a denial of service…

LOW 26Published 2006-07-13 · Updated 2025-01-17

Key facts

Attack vector: Local
Privileges required: Low
User interaction: None
Attack complexity: Low
Impact type: —
Confidentiality · integrity · availability: None · None · High
Fix status: No fix listed

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA.

Summary

EMC VMware Player allows user-assisted attackers to cause a denial of service (unrecoverable application failure) via a long value of the ide1:0.fileName parameter in the .vmx file of a virtual machine. NOTE: third parties have disputed this issue, saying that write access to the .vmx file enables other ways of stopping the virtual machine, so no privilege boundaries are crossed

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00872 59th percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	—	all versions	—	No fix listed	CNA

— Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:vmware:player::::::::	all versions	Vulnerable	VMware

cpe:2.3:a:vmware:player:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·VMware

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2006-3547
2026-10-03 Alias added: GHSA-24gw-9fv3-3c2w

References

Other 1

27524

TI-2010-01161 Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in… CVSS 3.1CRITICAL 9.8
TI-2012-03093 Format string vulnerability in VMware OVF Tool 2.1 on Windows, as used in VMware… CVSS 2.0HIGH 9.3
TI-2008-03731 Buffer overflow in a certain ActiveX control in the COM API in VMware Workstation 5.5.x… CVSS 2.0HIGH 10.0
TI-2007-00059 Integer underflow in the DHCP server in EMC VMware Workstation before 5.5.5 Build 56455… CVSS 2.0HIGH 10.0
TI-2009-03556 Format string vulnerability in vmware-vmrc.exe build 158248 in VMware Remote Console (aka… CVSS 2.0HIGH 10.0
TI-2005-04202 Heap-based buffer overflow in the NAT networking components vmnat.exe and vmnet-natd in… CVSS 2.0HIGH 10.0

See all 88 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences