9.3

CVE-2012-3288

VMware Workstation 7.x before 7.1.6 and 8.x before 8.0.4, VMware Player 3.x before 3.1.6 and 4.x before 4.0.4, VMware Fusion 4.x before 4.1.3, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 through 4.1 allow user-assisted remote attackers to execute arbitrary code on the host OS or cause a denial of service (memory corruption) on the host OS via a crafted Checkpoint file.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
VMware ≫ Workstation Version 7.0
VMware ≫ Workstation Version 7.0.1
VMware ≫ Workstation Version 7.1
VMware ≫ Workstation Version 7.1.1
VMware ≫ Workstation Version 7.1.2
VMware ≫ Workstation Version 7.1.3
VMware ≫ Workstation Version 7.1.4
VMware ≫ Workstation Version 7.1.4.16648
VMware ≫ Workstation Version 7.1.5
VMware ≫ Workstation Version 8.0
VMware ≫ Workstation Version 8.0.1
VMware ≫ Workstation Version 8.0.2
VMware ≫ Workstation Version 8.0.3
VMware ≫ Player Version 3.0
VMware ≫ Player Version 3.0.1
VMware ≫ Player Version 3.1
VMware ≫ Player Version 3.1.1
VMware ≫ Player Version 3.1.2
VMware ≫ Player Version 3.1.3
VMware ≫ Player Version 3.1.4
VMware ≫ Player Version 3.1.5
VMware ≫ Player Version 4.0
VMware ≫ Player Version 4.0.1
VMware ≫ Player Version 4.0.2
VMware ≫ Player Version 4.0.3
VMware ≫ Fusion Version 4.0
VMware ≫ Fusion Version 4.0.1
VMware ≫ Fusion Version 4.0.2
VMware ≫ Fusion Version 4.1
VMware ≫ Fusion Version 4.1.1
VMware ≫ Fusion Version 4.1.2
VMware ≫ Esx Version 3.5
VMware ≫ Esx Version 3.5 Update update1
VMware ≫ Esx Version 3.5 Update update2
VMware ≫ Esx Version 3.5 Update update3
VMware ≫ Esx Version 4.0
VMware ≫ Esx Version 4.1
VMware ≫ ESXi Version 3.5
VMware ≫ ESXi Version 3.5 Update 1
VMware ≫ ESXi Version 4.0
VMware ≫ ESXi Version 4.0 Update 1
VMware ≫ ESXi Version 4.0 Update 2
VMware ≫ ESXi Version 4.0 Update 3
VMware ≫ ESXi Version 4.0 Update 4
VMware ≫ ESXi Version 4.1
VMware ≫ ESXi Version 4.1 Update 1
VMware ≫ ESXi Version 4.1 Update 2
VMware ≫ ESXi Version 5.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.84% 0.888
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 9.3 8.6 10
AV:N/AC:M/Au:N/C:C/I:C/A:C
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://www.vmware.com/security/advisories/VMSA-2012-0011.html
Vendor Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17178