VMware Workstation 8.x before 8.0.3, VMware Player 4.x before 4.0.3, VMware Fusion 4.x through 4.1.2, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 through 4.1 do not properly configure the virtual floppy device, which allows guest OS users to cause a denial of service (out-of-bounds write operation and VMX process crash) or possibly execute arbitrary code on the host OS by leveraging administrative privileges on the guest OS.
CVSS Details
- CVSS 3.1 Base Score: 8.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Vmsa 2012 0009 | — | Upgrade VMware ESX 4.0 to build number 403554Upgrade VMware ESXi 5.0 to build number 702118Upgrade VMware ESX 3.5 to build number 702112Upgrade VMware ESXi 4.1 to build number 502767Upgrade VMware ESX 4.1 to build number 502767Upgrade VMware ESXi 3.5 to build number 702112Upgrade VMware ESXi 4.0 to build number 403554 | Dec 17, 2012 | May 4, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub