RCE in VMware Esx
CVE-2012-3289
VMware Workstation 8.x before 8.0.4, VMware Player 4.x before 4.0.4, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 through 4.1 allow remote attackers to cause a denial of service (guest OS crash) via crafted traffic from a remote virtual device.
Vulnerability class: RCE (Remote Code Execution)
EPSS: 0.017 (74.2th percentile) — read the EPSS interpretation.
Affected products
- Vmware Esx — versions 3.5, 4.0, 4.1
- Vmware Esxi — versions 3.5, 4.0, 4.1
- Vmware Player — versions 4.0, 4.0.1, 4.0.2
- Vmware Workstation — versions 8.0, 8.0.1, 8.0.2
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)