CVE-2012-1516 The VMX process in VMware ESXi 3.5 through 4.1 and ESX 3.5 through 4.1 does not properly handle RPC commands, which allows guest OS users to cause a denial of service (memory overwrite and process cra...
CriticalCVSS 9.9
EPSS 3.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The VMX process in VMware ESXi 3.5 through 4.1 and ESX 3.5 through 4.1 does not properly handle RPC commands, which allows guest OS users to cause a denial of service (memory overwrite and process crash) or possibly execute arbitrary code on the host OS via vectors involving data pointers.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| VMware ESX | = 3.5 | No fix listed |
| VMware ESX | = 3.5-update1 | No fix listed |
| VMware ESX | = 3.5-update2 | No fix listed |
| VMware ESX | = 3.5-update3 | No fix listed |
| VMware ESX | = 4.0 | No fix listed |
| VMware ESX | = 4.1 | No fix listed |
| VMware esxi | = 3.5 | No fix listed |
| VMware esxi | = 3.5-1 | No fix listed |
| VMware esxi | = 4.0 | No fix listed |
| VMware esxi | = 4.0-1 | No fix listed |
| VMware esxi | = 4.0-2 | No fix listed |
| VMware esxi | = 4.0-3 | No fix listed |
| VMware esxi | = 4.0-4 | No fix listed |
| VMware esxi | = 4.1 | No fix listed |
References
- 53369 third-party-advisory vdb-entry
- 1027018 third-party-advisory vdb-entry
- www.vmware.com vendor-advisory
- vmware-esxserver-rpc-priv-esc(75373) vdb-entry
- oval:org.mitre.oval:def:16810 signature tool-signature vdb-entry