VMware Workstation 7.x before 7.1.6 and 8.x before 8.0.4, VMware Player 3.x before 3.1.6 and 4.x before 4.0.4, VMware Fusion 4.x before 4.1.3, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 through 4.1 allow user-assisted remote attackers to execute arbitrary code on the host OS or cause a denial of service (memory corruption) on the host OS via a crafted Checkpoint file.
CVSS Details
- CVSS 3.1 Base Score: 8.4
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Vmsa 2012 0011 | — | Upgrade VMware ESXi 3.5 to build number 725354Upgrade VMware ESX 4.0 to build number 721907Upgrade VMware ESX 3.5 to build number 725354Upgrade VMware ESXi 5.0 to build number 721882Upgrade VMware ESXi 4.1 to build number 721871Upgrade VMware ESX 4.1 to build number 721871Upgrade VMware ESXi 4.0 to build number 721907 | Jun 20, 2012 | Jun 14, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub