Vulnerability Description
VMware Workstation 8.x before 8.0.4, VMware Player 4.x before 4.0.4, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 through 4.1 allow remote attackers to cause a denial of service (guest OS crash) via crafted traffic from a remote virtual device.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Vmware | Workstation | 8.0 |
| Vmware | Player | 4.0 |
| Vmware | Esx | 3.5 |
| Vmware | Esxi | 3.5 |
Related Weaknesses (CWE)
References
- http://www.vmware.com/security/advisories/VMSA-2012-0011.htmlVendor Advisory
- http://www.vmware.com/security/advisories/VMSA-2012-0011.htmlVendor Advisory
FAQ
What is CVE-2012-3289?
CVE-2012-3289 is a vulnerability with a CVSS score of 7.8 (HIGH). VMware Workstation 8.x before 8.0.4, VMware Player 4.x before 4.0.4, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 through 4.1 allow remote attackers to cause a denial of service (guest OS crash) vi...
How severe is CVE-2012-3289?
CVE-2012-3289 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2012-3289?
Check the references section above for vendor advisories and patch information. Affected products include: Vmware Workstation, Vmware Player, Vmware Esx, Vmware Esxi.