critical9.3
CVE-2012-3288
VMware Workstation 7.x before 7.1.6 and 8.x before 8.0.4, VMware Player 3.x before 3.1.6 and 4.x before 4.0.4, VMware Fusion 4.x before 4.1.3, VMware ESXi 3.5 …
Impact
VMware Workstation 7.x before 7.1.6 and 8.x before 8.0.4, VMware Player 3.x before 3.1.6 and 4.x before 4.0.4, VMware Fusion 4.x before 4.1.3, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 through 4.1 allow user-assisted remote attackers to execute arbitrary code on the host OS or cause a denial of service (memory corruption) on the host OS via a crafted Checkpoint file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vmware | Workstation | Versions 7.0, 7.0.1, 7.1, 7.1.1, 7.1.2, 7.1.3 |
| Vmware | Player | Versions 3.0, 3.0.1, 3.1, 3.1.1, 3.1.2, 3.1.3 |
| Vmware | Fusion | Versions 4.0, 4.0.1, 4.0.2, 4.1, 4.1.1, 4.1.2 |
| Vmware | Esx | Versions 3.5, 4.0, 4.1 |
| Vmware | Esxi | Versions 3.5, 4.0, 4.1, 5.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.vmware.com/security/advisories/VMSA-2012-0011.html
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17178
- http://www.vmware.com/security/advisories/VMSA-2012-0011.html
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17178