VMware ESX and ESXi CVE-2013-3657 Unspecified Buffer Overflow Vulnerability

Bugtraq ID:	62316
Class:	Boundary Condition Error
CVE:	CVE-2013-3657
Remote:	Yes
Local:	No
Published:	Sep 06 2013 12:00AM
Updated:	Sep 06 2013 12:00AM
Credit:	Shanon Olsson
Vulnerable:	VMWare ESXi 5.0 VMWare ESXi 4.1 VMWare ESXi 4.0 VMWare ESX 4.1 VMWare ESX 4.0
Not Vulnerable:

VMware ESX and ESXi CVE-2013-3657 Unspecified Buffer Overflow Vulnerability

VMware ESX and ESXi are prone to an unspecified buffer-overflow vulnerability because it fails to properly bounds check data.

Successful exploits may allow an attacker to execute arbitrary code within the context of the user running the affected application. Failed attempts will likely cause a denial-of-service condition.

The following versions are vulnerable:

VMware ESX 4.1 and 4.0
VMware ESXi 5.0, 4.1 and 4.0

VMware ESX and ESXi CVE-2013-3657 Unspecified Buffer Overflow Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

VMware ESX and ESXi CVE-2013-3657 Unspecified Buffer Overflow Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

VMware ESX and ESXi CVE-2013-3657 Stack Based Buffer Overflow Vulnerability

References:

• VMware Homepage (VMware)