QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2012-2450

Back to search

CVE-2012-2450

Published: May 4, 2012

Modified: Aug 6, 2024

PUBLISHED

Description

VMware Workstation 8.x before 8.0.3, VMware Player 4.x before 4.0.3, VMware Fusion 4.x before 4.1.2, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 through 4.1 do not properly register SCSI devices, which allows guest OS users to cause a denial of service (invalid write operation and VMX process crash) or possibly execute arbitrary code on the host OS by leveraging administrative privileges on the guest OS.

VendorProductVersions

n/a

n/a

affected
n/a

References

esxserver-scsi-priv-esc(75377)
vdb-entry
x_refsource_XF
oval:org.mitre.oval:def:16852
vdb-entry
signature
x_refsource_OVAL
49032
third-party-advisory
x_refsource_SECUNIA
53369
vdb-entry
x_refsource_BID
81695
vdb-entry
x_refsource_OSVDB
1027019
vdb-entry
x_refsource_SECTRACK

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now
CVE-2012-2450 - Security Vulnerability | QwikSec