CVE-2012-3288: Input Validation
First published: Thu Jun 14 2012(Updated: )
VMware Workstation 7.x before 7.1.6 and 8.x before 8.0.4, VMware Player 3.x before 3.1.6 and 4.x before 4.0.4, VMware Fusion 4.x before 4.1.3, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 through 4.1 allow user-assisted remote attackers to execute arbitrary code on the host OS or cause a denial of service (memory corruption) on the host OS via a crafted Checkpoint file.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| VMware Workstation | =7.0 | |
| VMware Workstation | =7.0.1 | |
| VMware Workstation | =7.1 | |
| VMware Workstation | =7.1.1 | |
| VMware Workstation | =7.1.2 | |
| VMware Workstation | =7.1.3 | |
| VMware Workstation | =7.1.4 | |
| VMware Workstation | =7.1.4.16648 | |
| VMware Workstation | =7.1.5 | |
| VMware Workstation | =8.0 | |
| VMware Workstation | =8.0.1 | |
| VMware Workstation | =8.0.2 | |
| VMware Workstation | =8.0.3 | |
| VMware Player | =3.0 | |
| VMware Player | =3.0.1 | |
| VMware Player | =3.1 | |
| VMware Player | =3.1.1 | |
| VMware Player | =3.1.2 | |
| VMware Player | =3.1.3 | |
| VMware Player | =3.1.4 | |
| VMware Player | =3.1.5 | |
| VMware Player | =4.0 | |
| VMware Player | =4.0.1 | |
| VMware Player | =4.0.2 | |
| VMware Player | =4.0.3 | |
| VMware Fusion Pro | =4.0 | |
| VMware Fusion Pro | =4.0.1 | |
| VMware Fusion Pro | =4.0.2 | |
| VMware Fusion Pro | =4.1 | |
| VMware Fusion Pro | =4.1.1 | |
| VMware Fusion Pro | =4.1.2 | |
| VMware ESX | =3.5 | |
| VMware ESX | =3.5-update1 | |
| VMware ESX | =3.5-update2 | |
| VMware ESX | =3.5-update3 | |
| VMware ESX | =4.0 | |
| VMware ESX | =4.1 | |
| VMware ESXi | =3.5 | |
| VMware ESXi | =3.5-1 | |
| VMware ESXi | =4.0 | |
| VMware ESXi | =4.0-1 | |
| VMware ESXi | =4.0-2 | |
| VMware ESXi | =4.0-3 | |
| VMware ESXi | =4.0-4 | |
| VMware ESXi | =4.1 | |
| VMware ESXi | =4.1-1 | |
| VMware ESXi | =4.1-2 | |
| VMware ESXi | =5.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2012-3288?
CVE-2012-3288 is rated as a critical vulnerability that allows remote attackers to execute arbitrary code on the host OS.
How do I fix CVE-2012-3288?
To fix CVE-2012-3288, upgrade to VMware Workstation 7.1.6 or 8.0.4, VMware Player 3.1.6 or 4.0.4, VMware Fusion 4.1.3, or apply the necessary patches on affected versions.
What are the affected versions of VMware for CVE-2012-3288?
VMware Workstation 7.x before 7.1.6, 8.x before 8.0.4, VMware Player 3.x before 3.1.6 and 4.x before 4.0.4, and VMware Fusion 4.x before 4.1.3 are affected.
Can CVE-2012-3288 be exploited without user assistance?
No, CVE-2012-3288 requires user-assisted exploitation for remote attackers to execute arbitrary code.
What systems are vulnerable due to CVE-2012-3288?
VMware ESXi 3.5 through 5.0 and VMware ESX 3.5 through 4.1 systems are also vulnerable due to CVE-2012-3288.
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/last-modified-date
- agent/author
- agent/severity
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/vmware
- canonical/vmware workstation
- version/vmware workstation/7.0
- version/vmware workstation/7.0.1
- version/vmware workstation/7.1
- version/vmware workstation/7.1.1
- version/vmware workstation/7.1.2
- version/vmware workstation/7.1.3
- version/vmware workstation/7.1.4
- version/vmware workstation/7.1.4.16648
- version/vmware workstation/7.1.5
- version/vmware workstation/8.0
- version/vmware workstation/8.0.1
- version/vmware workstation/8.0.2
- version/vmware workstation/8.0.3
- canonical/vmware player
- version/vmware player/3.0
- version/vmware player/3.0.1
- version/vmware player/3.1
- version/vmware player/3.1.1
- version/vmware player/3.1.2
- version/vmware player/3.1.3
- version/vmware player/3.1.4
- version/vmware player/3.1.5
- version/vmware player/4.0
- version/vmware player/4.0.1
- version/vmware player/4.0.2
- version/vmware player/4.0.3
- canonical/vmware fusion pro
- version/vmware fusion pro/4.0
- version/vmware fusion pro/4.0.1
- version/vmware fusion pro/4.0.2
- version/vmware fusion pro/4.1
- version/vmware fusion pro/4.1.1
- version/vmware fusion pro/4.1.2
- canonical/vmware esx
- version/vmware esx/3.5
- version/vmware esx/3.5-update1
- version/vmware esx/3.5-update2
- version/vmware esx/3.5-update3
- version/vmware esx/4.0
- version/vmware esx/4.1
- canonical/vmware esxi
- version/vmware esxi/3.5
- version/vmware esxi/3.5-1
- version/vmware esxi/4.0
- version/vmware esxi/4.0-1
- version/vmware esxi/4.0-2
- version/vmware esxi/4.0-3
- version/vmware esxi/4.0-4
- version/vmware esxi/4.1
- version/vmware esxi/4.1-1
- version/vmware esxi/4.1-2
- version/vmware esxi/5.0