Published: 04/05/2012 Updated: 27/09/2019

CVSS v2 Base Score: 9 | Impact Score: 10 | Exploitability Score: 8

CVSS v3 Base Score: 9.9 | Impact Score: 6 | Exploitability Score: 3.1

VMScore: 801

Vector: AV:N/AC:L/Au:S/C:C/I:C/A:C

The VMX process in VMware ESXi 3.5 up to and including 4.1 and ESX 3.5 up to and including 4.1 does not properly handle RPC commands, which allows guest OS users to cause a denial of service (memory overwrite and process crash) or possibly execute arbitrary code on the host OS via vectors involving data pointers.

Vulnerable Product	Search on Vulmon	Subscribe to Product
vmware esx 4.0
vmware esx 4.1
vmware esx 3.5
vmware esxi 4.0
vmware esxi 4.1
vmware esxi 3.5

The vulnerability described in this document could hypothetically be exploited by unprivileged code running in a VMware virtual machine (guest) in order to execute code in the host VMX process, thereby breaking out of the virtual machine; however, such exploitation has not been proven In the event that arbitrary code execution in the VMX process i ...

CWE-119 http://www.vmware.com/security/advisories/VMSA-2012-0009.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16810 https://exchange.xforce.ibmcloud.com/vulnerabilities/75373 http://www.securitytracker.com/id?1027018 http://www.securityfocus.com/bid/53369 https://nvd.nist.gov https://packetstormsecurity.com/files/112479/VMware-Backdoor-Response-Uninitialized-Memory-Potential-VM-Break.html

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2012-1516

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect