CVE-2012-3288
Summary
| CVE | CVE-2012-3288 |
|---|---|
| State | PUBLISHED |
| Assigner | mitre |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2012-06-14 20:55:01 UTC |
| Updated | 2026-04-29 01:13:23 UTC |
| Description | VMware Workstation 7.x before 7.1.6 and 8.x before 8.0.4, VMware Player 3.x before 3.1.6 and 4.x before 4.0.4, VMware Fusion 4.x before 4.1.3, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 through 4.1 allow user-assisted remote attackers to execute arbitrary code on the host OS or cause a denial of service (memory corruption) on the host OS via a crafted Checkpoint file. |
Risk And Classification
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
MediumAuthentication
NoneConfidentiality
CompleteIntegrity
CompleteAvailability
CompleteAV:N/AC:M/Au:N/C:C/I:C/A:C
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Vmware | Esx | 3.5 | All | All | All |
| Operating System | Vmware | Esx | 3.5 | update1 | All | All |
| Operating System | Vmware | Esx | 3.5 | update2 | All | All |
| Operating System | Vmware | Esx | 3.5 | update3 | All | All |
| Operating System | Vmware | Esx | 4.0 | All | All | All |
| Operating System | Vmware | Esx | 4.1 | All | All | All |
| Operating System | Vmware | Esxi | 3.5 | All | All | All |
| Operating System | Vmware | Esxi | 3.5 | 1 | All | All |
| Operating System | Vmware | Esxi | 4.0 | All | All | All |
| Operating System | Vmware | Esxi | 4.0 | 1 | All | All |
| Operating System | Vmware | Esxi | 4.0 | 2 | All | All |
| Operating System | Vmware | Esxi | 4.0 | 3 | All | All |
| Operating System | Vmware | Esxi | 4.0 | 4 | All | All |
| Operating System | Vmware | Esxi | 4.1 | All | All | All |
| Operating System | Vmware | Esxi | 4.1 | 1 | All | All |
| Operating System | Vmware | Esxi | 4.1 | 2 | All | All |
| Operating System | Vmware | Esxi | 5.0 | All | All | All |
| Application | Vmware | Fusion | 4.0 | All | All | All |
| Application | Vmware | Fusion | 4.0.1 | All | All | All |
| Application | Vmware | Fusion | 4.0.2 | All | All | All |
| Application | Vmware | Fusion | 4.1 | All | All | All |
| Application | Vmware | Fusion | 4.1.1 | All | All | All |
| Application | Vmware | Fusion | 4.1.2 | All | All | All |
| Application | Vmware | Player | 3.0 | All | All | All |
| Application | Vmware | Player | 3.0.1 | All | All | All |
| Application | Vmware | Player | 3.1 | All | All | All |
| Application | Vmware | Player | 3.1.1 | All | All | All |
| Application | Vmware | Player | 3.1.2 | All | All | All |
| Application | Vmware | Player | 3.1.3 | All | All | All |
| Application | Vmware | Player | 3.1.4 | All | All | All |
| Application | Vmware | Player | 3.1.5 | All | All | All |
| Application | Vmware | Player | 4.0 | All | All | All |
| Application | Vmware | Player | 4.0.1 | All | All | All |
| Application | Vmware | Player | 4.0.2 | All | All | All |
| Application | Vmware | Player | 4.0.3 | All | All | All |
| Application | Vmware | Workstation | 7.0 | All | All | All |
| Application | Vmware | Workstation | 7.0.1 | All | All | All |
| Application | Vmware | Workstation | 7.1 | All | All | All |
| Application | Vmware | Workstation | 7.1.1 | All | All | All |
| Application | Vmware | Workstation | 7.1.2 | All | All | All |
| Application | Vmware | Workstation | 7.1.3 | All | All | All |
| Application | Vmware | Workstation | 7.1.4 | All | All | All |
| Application | Vmware | Workstation | 7.1.4.16648 | All | All | All |
| Application | Vmware | Workstation | 7.1.5 | All | All | All |
| Application | Vmware | Workstation | 8.0 | All | All | All |
| Application | Vmware | Workstation | 8.0.1 | All | All | All |
| Application | Vmware | Workstation | 8.0.2 | All | All | All |
| Application | Vmware | Workstation | 8.0.3 | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| VMSA-2012-0011 | af854a3a-2127-422b-91ae-364da2661108 | www.vmware.com | Vendor Advisory |
| Repository / Oval Repository | af854a3a-2127-422b-91ae-364da2661108 | oval.cisecurity.org | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.