VMware Workstation 8.x before 8.0.3, VMware Player 4.x before 4.0.3, VMware Fusion 4.x before 4.1.2, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 through 4.1 do not properly register SCSI devices, which allows guest OS users to cause a denial of service (invalid write operation and VMX process crash) or possibly execute arbitrary code on the host OS by leveraging administrative privileges on the guest OS.
CVSS Details
- CVSS 3.1 Base Score: 8.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Vmsa 2012 0009 | — | Upgrade VMware ESXi 5.0 to build number 702118Upgrade VMware ESXi 3.5 to build number 702112Upgrade VMware ESXi 4.0 to build number 403554Upgrade VMware ESXi 4.1 to build number 502767Upgrade VMware ESX 4.1 to build number 502767Upgrade VMware ESX 4.0 to build number 403554Upgrade VMware ESX 3.5 to build number 702112 | Dec 17, 2012 | May 4, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub