Lucene search

K
nvd[email protected]NVD:CVE-2012-1517
HistoryMay 04, 2012 - 4:55 p.m.

CVE-2012-1517

2012-05-0416:55:01
CWE-119
web.nvd.nist.gov
5

CVSS2

9

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

AI Score

9.7

Confidence

High

EPSS

0.002

Percentile

65.0%

The VMX process in VMware ESXi 4.1 and ESX 4.1 does not properly handle RPC commands, which allows guest OS users to cause a denial of service (memory overwrite and process crash) or possibly execute arbitrary code on the host OS via vectors involving function pointers.

Affected configurations

Nvd
Node
vmwareesxMatch4.1
OR
vmwareesxiMatch4.1
VendorProductVersionCPE
vmwareesx4.1cpe:2.3:o:vmware:esx:4.1:*:*:*:*:*:*:*
vmwareesxi4.1cpe:2.3:o:vmware:esxi:4.1:*:*:*:*:*:*:*

CVSS2

9

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

AI Score

9.7

Confidence

High

EPSS

0.002

Percentile

65.0%