CVE-2012-3289: Code Injection
VMware Workstation 8.x before 8.0.4, VMware Player 4.x before 4.0.4, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 through 4.1 allow remote attackers to cause a denial of service (guest OS crash) via crafted traffic from a remote virtual device.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-3289?
CVE-2012-3289 is rated as a high severity vulnerability due to its potential to cause a denial of service by crashing the guest operating system.
How do I fix CVE-2012-3289?
To fix CVE-2012-3289, update VMware Workstation to version 8.0.4 or higher, VMware Player to version 4.0.4 or higher, or ensure your VMware ESXi or ESX systems are patched to versions above 5.0.
What software is affected by CVE-2012-3289?
CVE-2012-3289 affects VMware Workstation 8.x prior to 8.0.4, VMware Player 4.x prior to 4.0.4, and various versions of VMware ESXi and ESX from 3.5 to 5.0.
How can CVE-2012-3289 be exploited?
CVE-2012-3289 can be exploited remotely by sending crafted traffic from a remote virtual device, leading to a crash of the guest operating system.
Is there a workaround for CVE-2012-3289?
A workaround for CVE-2012-3289 may include restricting access to the network interfaces utilized by the affected VMware products until a patch is applied.