VMSA-2012-0011 : VMware hosted products and ESXi and ESX patches address security issues

a. VMware Host Checkpoint file memory corruption Input data is not properly validated when loading Checkpoint files. This may allow an attacker with the ability to load a specially crafted Checkpoint file to execute arbitrary code on the host. Workaround - None identified Mitigation - Do not impo...

VMware ESXi/ESX patches address security issues (VMSA-2012-0011)

The remote ESXi is missing one or more security related Updates from VMSA-2012-0011. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Design/Logic Flaw

VMware Workstation 8.x before 8.0.4, VMware Player 4.x before 4.0.4, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 through 4.1 allow remote attackers to cause a denial of service guest OS crash via crafted traffic from a remote virtual device...

CVE-2012-3289

Summary: CVE-2012-3289 (VMware) is disclosed across multiple VMware products. The vulnerability allows remote attackers to cause a denial of service by crafting traffic from remote virtual devices, potentially crashing guest VMs. Affected products (per sources): VMware Workstation 8.x prior to 8....

CVE-2012-3288: Improper Input Validation

VMware Workstation 7.x before 7.1.6 and 8.x before 8.0.4, VMware Player 3.x before 3.1.6 and 4.x before 4.0.4, VMware Fusion 4.x before 4.1.3, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 through 4.1 allow user-assisted remote attackers to execute arbitrary code on the host OS or cause a denia...

CVE-2012-3289: Improper Control of Generation of Code

VMware Workstation 8.x before 8.0.4, VMware Player 4.x before 4.0.4, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 through 4.1 allow remote attackers to cause a denial of service guest OS crash via crafted traffic from a remote virtual device...

VMSA-2012-0011:VMware hosted products and ESXi and ESX patches address security issues

VMSA-2012-0011 VMware hosted products and ESXi and ESX patches address security issues VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2012-0011 VMware Security Advisory Synopsis: VMware hosted products and ESXi and ESX patches address security issues VMware Security Advisory...

VMSA-2012-0009 : ESXi and ESX patches address critical security issues (uncredentialed check)

The remote VMware ESX/ESXi host is affected by the following security vulnerabilities : - ESX NFS traffic parsing vulnerability: Due to a flaw in the handling of NFS traffic, it is possible to overwrite memory. This vulnerability may allow a user with access to the network to execute code on the...

VMSA-2012-0009 VMware Workstation, Player, ESXi and ESX patches address critical security issues

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ----------------------------------------------------------------------- VMware Security Advisory Advisory ID: VMSA-2012-0009 Synopsis: VMware Workstation, Player, ESXi and ESX patches address critical security issues Issue date: 2012-05-03 Updated on:...

CVE-2012-2448

VMware ESXi 3.5 through 5.0 and ESX 3.5 through 4.1 allow remote attackers to execute arbitrary code or cause a denial of service memory overwrite via NFS traffic...

CVE-2012-1517

The VMX process in VMware ESXi 4.1 and ESX 4.1 does not properly handle RPC commands, which allows guest OS users to cause a denial of service memory overwrite and process crash or possibly execute arbitrary code on the host OS via vectors involving function pointers...

CVE-2012-1516

The VMX process in VMware ESXi 3.5 through 4.1 and ESX 3.5 through 4.1 does not properly handle RPC commands, which allows guest OS users to cause a denial of service memory overwrite and process crash or possibly execute arbitrary code on the host OS via vectors involving data pointers...

Code injection

VMware ESXi 3.5 through 5.0 and ESX 3.5 through 4.1 allow remote attackers to execute arbitrary code or cause a denial of service memory overwrite via NFS traffic...

Design/Logic Flaw

The VMX process in VMware ESXi 3.5 through 4.1 and ESX 3.5 through 4.1 does not properly handle RPC commands, which allows guest OS users to cause a denial of service memory overwrite and process crash or possibly execute arbitrary code on the host OS via vectors involving data pointers...

Design/Logic Flaw

The VMX process in VMware ESXi 4.1 and ESX 4.1 does not properly handle RPC commands, which allows guest OS users to cause a denial of service memory overwrite and process crash or possibly execute arbitrary code on the host OS via vectors involving function pointers...

CVE-2012-2448

CVE-2012-2448 affects VMware ESXi/ESX (3.5–5.0, 3.5–4.1 respectively) via an NFS traffic handling flaw that enables remote code execution or memory overwrite. Connected sources (VMSA-2012-0009 and Nessus entries) confirm a remote exploitation vector over NFS and indicate that patched releases exi...

CVE-2012-1516

The VMX process in VMware ESXi 3.5 through 4.1 and ESX 3.5 through 4.1 does not properly handle RPC commands, which allows guest OS users to cause a denial of service memory overwrite and process crash or possibly execute arbitrary code on the host OS via vectors involving data pointers...

CVE-2012-1517

The VMX process in VMware ESXi 4.1 and ESX 4.1 does not properly handle RPC commands, which allows guest OS users to cause a denial of service memory overwrite and process crash or possibly execute arbitrary code on the host OS via vectors involving function pointers...

CVE-2012-2448

VMware ESXi 3.5 through 5.0 and ESX 3.5 through 4.1 allow remote attackers to execute arbitrary code or cause a denial of service memory overwrite via NFS traffic...

CVE-2012-1517

CVE-2012-1517 affects VMware ESXi/ESX 4.1 where the VMX process mishandles RPC commands, allowing a guest user to cause a memory overwrite and denial of service or potentially execute code on the host via function pointer vectors. Connected sources confirm the issue is tied to RPC handling in VMX...