Improper input validation in VMware Esx
CVE-2012-3288
VMware Workstation 7.x before 7.1.6 and 8.x before 8.0.4, VMware Player 3.x before 3.1.6 and 4.x before 4.0.4, VMware Fusion 4.x before 4.1.3, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 through 4.1 allow user-assisted remote attackers to execute arbitrary code on the host OS or cause a denial of service (memory corruption) on the host OS via a crafted Checkpoint file.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.038 (89.0th percentile) — read the EPSS interpretation.
Affected products
- Vmware Esx — versions 3.5, 4.0, 4.1
- Vmware Esxi — versions 3.5, 4.0, 4.1
- Vmware Fusion — versions 4.0, 4.0.1, 4.0.2
- Vmware Player — versions 3.0, 3.0.1, 3.1
- Vmware Workstation — versions 7.0, 7.0.1, 7.1
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
- cve@mitre.org (signature, x_refsource_OVAL, vdb-entry)