CVE-2007-4058
EMC VMware 6.0.0 - Remote Code Execution via vielib.dll StartProcess Path Traversal
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2007-4058. PoCs published by callAX.
AI-analyzed exploit summary This exploit leverages an unsafe method call in vielib.dll (CLSID: 7B9C5422-39AA-4C21-BEEF-645E42EB4529) to execute arbitrary commands via the StartProcess method. It uses standard Office files as stdin/stdout/stderr placeholders to bypass checks and executes 'netsh' to open a firewall port.
Description
Absolute path traversal vulnerability in a certain ActiveX control in vielib.dll 2.2.5.42958 in EMC VMware 6.0.0 allows remote attackers to execute arbitrary local programs via a full pathname in the first argument to the StartProcess method.
Exploits (1)
This exploit leverages an unsafe method call in vielib.dll (CLSID: 7B9C5422-39AA-4C21-BEEF-645E42EB4529) to execute arbitrary commands via the StartProcess method. It uses standard Office files as stdin/stdout/stderr placeholders to bypass checks and executes 'netsh' to open a firewall port.