7.8

CVE-2012-3289

VMware Workstation 8.x before 8.0.4, VMware Player 4.x before 4.0.4, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 through 4.1 allow remote attackers to cause a denial of service (guest OS crash) via crafted traffic from a remote virtual device.

Data is provided by the National Vulnerability Database (NVD)
VMware ≫ Workstation Version8.0
VMware ≫ Workstation Version8.0.1
VMware ≫ Workstation Version8.0.2
VMware ≫ Workstation Version8.0.3
VMware ≫ Player Version4.0
VMware ≫ Player Version4.0.1
VMware ≫ Player Version4.0.2
VMware ≫ Player Version4.0.3
VMware ≫ Esx Version3.5
VMware ≫ Esx Version3.5 Updateupdate1
VMware ≫ Esx Version3.5 Updateupdate2
VMware ≫ Esx Version3.5 Updateupdate3
VMware ≫ Esx Version4.0
VMware ≫ Esx Version4.1
VMware ≫ ESXi Version3.5
VMware ≫ ESXi Version3.5 Update1
VMware ≫ ESXi Version4.0
VMware ≫ ESXi Version4.0 Update1
VMware ≫ ESXi Version4.0 Update2
VMware ≫ ESXi Version4.0 Update3
VMware ≫ ESXi Version4.0 Update4
VMware ≫ ESXi Version4.1
VMware ≫ ESXi Version4.1 Update1
VMware ≫ ESXi Version4.1 Update2
VMware ≫ ESXi Version5.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.45% 0.607
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.8 10 6.9
AV:N/AC:L/Au:N/C:N/I:N/A:C
CWE-94 Improper Control of Generation of Code ('Code Injection')

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.