Back to search
CVE-2012-2449
Published: May 4, 2012
Modified: Aug 6, 2024
PUBLISHED
Description
VMware Workstation 8.x before 8.0.3, VMware Player 4.x before 4.0.3, VMware Fusion 4.x through 4.1.2, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 through 4.1 do not properly configure the virtual floppy device, which allows guest OS users to cause a denial of service (out-of-bounds write operation and VMX process crash) or possibly execute arbitrary code on the host OS by leveraging administrative privileges on the guest OS.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
81694
vdb-entry
x_refsource_OSVDB
http://www.vmware.com/security/advisories/VMSA-2012-0009.html
x_refsource_CONFIRM
oval:org.mitre.oval:def:16863
vdb-entry
signature
x_refsource_OVAL
49032
third-party-advisory
x_refsource_SECUNIA
53369
vdb-entry
x_refsource_BID
vmware-esxserver-floppy-priv-esc(75376)
vdb-entry
x_refsource_XF
1027019
vdb-entry
x_refsource_SECTRACK
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now