CVE-2014-1207: Null Pointer Dereference
Published Jan 17, 2014
·Updated
VMware ESXi 4.0 through 5.1 and ESX 4.0 and 4.1 allow remote attackers to cause a denial of service (NULL pointer dereference) by intercepting and modifying Network File Copy (NFC) traffic.
Affected Software
14 affected components
VMware ESXi=4.0
VMware ESXi=4.0-1
VMware ESXi=4.0-2
VMware ESXi=4.0-3
VMware ESXi=4.0-4
VMware ESXi=4.1
VMware ESXi=4.1-1
VMware ESXi=4.1-2
VMware ESXi=5.0
VMware ESXi=5.0-1
VMware ESXi=5.0-2
VMware ESXi=5.1
VMware ESX=4.0
VMware ESX=4.1
Event History
Jan 17, 2014
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Data Sourced
via NVD·09:55 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2014-1207?
CVE-2014-1207 has a severity level classified as high due to its potential to cause a denial of service.
2
How do I fix CVE-2014-1207?
To fix CVE-2014-1207, it is recommended to upgrade VMware ESXi and ESX to the latest versions that include security patches.
3
What versions of VMware are affected by CVE-2014-1207?
CVE-2014-1207 affects VMware ESXi versions 4.0 to 5.1 and VMware ESX versions 4.0 and 4.1.
4
What type of attack does CVE-2014-1207 enable?
CVE-2014-1207 enables remote attackers to cause a denial of service through intercepting and modifying Network File Copy (NFC) traffic.
5
Is there a workaround for CVE-2014-1207?
There are no specific workarounds for CVE-2014-1207, so applying security updates is essential.