CVE-2012-3288: Input Validation
VMware Workstation 7.x before 7.1.6 and 8.x before 8.0.4, VMware Player 3.x before 3.1.6 and 4.x before 4.0.4, VMware Fusion 4.x before 4.1.3, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 through 4.1 allow user-assisted remote attackers to execute arbitrary code on the host OS or cause a denial of service (memory corruption) on the host OS via a crafted Checkpoint file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-3288?
CVE-2012-3288 is rated as a critical vulnerability that allows remote attackers to execute arbitrary code on the host OS.
How do I fix CVE-2012-3288?
To fix CVE-2012-3288, upgrade to VMware Workstation 7.1.6 or 8.0.4, VMware Player 3.1.6 or 4.0.4, VMware Fusion 4.1.3, or apply the necessary patches on affected versions.
What are the affected versions of VMware for CVE-2012-3288?
VMware Workstation 7.x before 7.1.6, 8.x before 8.0.4, VMware Player 3.x before 3.1.6 and 4.x before 4.0.4, and VMware Fusion 4.x before 4.1.3 are affected.
Can CVE-2012-3288 be exploited without user assistance?
No, CVE-2012-3288 requires user-assisted exploitation for remote attackers to execute arbitrary code.
What systems are vulnerable due to CVE-2012-3288?
VMware ESXi 3.5 through 5.0 and VMware ESX 3.5 through 4.1 systems are also vulnerable due to CVE-2012-3288.