VULNERABILITY INTELLIGENCE

CVE-2012-1517

CVSS score9 HIGH
EPSS probability2.43%
CISA KEVNot currently listed
Published2012-05-04
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:S/C:C/I:C/A:C

Description

The VMX process in VMware ESXi 4.1 and ESX 4.1 does not properly handle RPC commands, which allows guest OS users to cause a denial of service (memory overwrite and process crash) or possibly execute arbitrary code on the host OS via vectors involving function pointers.

Weakness classification

  • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

Primary references