CVE-2012-5703: Input Validation
Published Nov 20, 2012
·Updated
The vSphere API in VMware ESXi 4.1 and ESX 4.1 allows remote attackers to cause a denial of service (host daemon crash) via an invalid value in a (1) RetrieveProp or (2) RetrievePropEx SOAP request.
Affected Software
2 affected components
VMware ESX=4.1
VMware ESXi=4.1
Event History
Nov 20, 2012
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-5703?
CVE-2012-5703 is classified as a denial of service vulnerability which can cause a host daemon crash.
2
How does CVE-2012-5703 affect VMware ESXi and ESX?
CVE-2012-5703 allows remote attackers to crash the host daemon by sending invalid values in RetrieveProp or RetrievePropEx SOAP requests.
3
Which versions of VMware are vulnerable to CVE-2012-5703?
VMware ESXi 4.1 and ESX 4.1 are the affected versions in CVE-2012-5703.
4
What should I do if my system is affected by CVE-2012-5703?
To mitigate CVE-2012-5703, ensure your VMware ESXi or ESX 4.1 is updated to the latest patch provided by VMware.
5
Can CVE-2012-5703 be exploited remotely?
Yes, CVE-2012-5703 can be exploited remotely by attackers to trigger a denial of service condition.