Lumension® Endpoint Intelligence Center

Intelligence Center » Browse All Vulnerabilities » CVE-2012-1517

Overview

Vulnerability Score 9.0 9.0
CVE Id CVE-2012-1517
Last Modified 02 Nov 2013 11:22:48
Published 04 May 2012 12:55:01
Confidentiality Impact COMPLETE COMPLETE
Integrity Impact COMPLETE COMPLETE
Availability Impact COMPLETE COMPLETE
Access Vector NETWORK
Access Complexity LOW
Authentication SINGLE_INSTANCE

CVE-2012-1517

Summary

The VMX process in VMware ESXi 4.1 and ESX 4.1 does not properly handle RPC commands, which allows guest OS users to cause a denial of service (memory overwrite and process crash) or possibly execute arbitrary code on the host OS via vectors involving function pointers.

Vulnerable Systems

Operating System

  • Vmware Esx 4.1

  • Vmware Esxi 4.1


References

CONFIRM - http://www.vmware.com/security/advisories/VMSA-2012-0009.html

Related Patches

VMware VMSA-2012-0011 VMSA-2012-0009.2 VMSA-2012-0007.1 VMware Workstation 7.1.6 for Windows (Update) (See Notes)(Rev 2)

VMware VMSA-2012-0011 VMSA-2012-0009.2 VMSA-2012-0007.1 VMware Player 3.1.6 for Windows (Update) (See Notes) (Rev 2)


Last Updated: 27 May 2016 10:57:32