Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
VMware Workstation 8.x before 8.0.3, VMware Player 4.x before 4.0.3, VMware Fusion 4.x through 4.1.2, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 through 4.1 do not properly configure the virtual floppy device, which allows guest OS users to cause a denial of service (out-of-bounds write operation and VMX process crash) or possibly execute arbitrary code on the host OS by leveraging administrative privileges on the guest OS.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
11 versions affected across 5 products
@dorisburkemuse @basedjensen @Corey_Yanofsky I’m guessing you haven’t heard of CVE-2012-2449, one of the all-time greats 😂 VMs don’t protect the internet, they protect customers (some of whom do stupid shit like run Windows VMs to install dodgy software on) from other customers in the same datacenter.
29 of 29 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | vmware | esx | 3.5 | - | - |
| OS | vmware | esx | 3.5 | - | - |
| OS | vmware | esx | 3.5 | - | - |
| OS | vmware | esx | 3.5 | - | - |
| OS | vmware | esx | 4.0 | - | - |
| OS | vmware | esx | 4.1 | - | - |
| OS | vmware | esxi | 3.5 | - | - |
| OS | vmware | esxi | 3.5 | - | - |
| OS | vmware | esxi | 4.0 | - | - |
| OS | vmware | esxi | 4.0 | - | - |
| OS | vmware | esxi | 4.0 | - | - |
| OS | vmware | esxi | 4.0 | - | - |
| OS | vmware | esxi | 4.0 | - | - |
| OS | vmware | esxi | 4.1 | - | - |
| OS | vmware | esxi | 4.1 | - | - |
| OS | vmware | esxi | 4.1 | - | - |
| OS | vmware | esxi | 5.0 | - | - |
| App | vmware | fusion | 4.0 | - | - |
| App | vmware | fusion | 4.0.1 | - | - |
| App | vmware | fusion | 4.0.2 | - | - |
| App | vmware | fusion | 4.1 | - | - |
| App | vmware | fusion | 4.1.1 | - | - |
| App | vmware | fusion | 4.1.2 | - | - |
| App | vmware | player | 4.0 | - | - |
| App | vmware | player | 4.0.1 | - | - |
| App | vmware | player | 4.0.2 | - | - |
| App | vmware | workstation | 8.0 | - | - |
| App | vmware | workstation | 8.0.1 | - | - |
| App | vmware | workstation | 8.0.2 | - | - |