CVE

Id
55693  
CVE No.
CVE-2012-2450  
Status
Candidate  
Description
VMware Workstation 8.x before 8.0.3, VMware Player 4.x before 4.0.3, VMware Fusion 4.x before 4.1.2, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 through 4.1 do not properly register SCSI devices, which allows guest OS users to cause a denial of service (invalid write operation and VMX process crash) or possibly execute arbitrary code on the host OS by leveraging administrative privileges on the guest OS.  
Phase
Assigned (20120501)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
580627 55693 CVE-2012-2450 CONFIRM:http://www.vmware.com/security/advisories/VMSA-2012-0009.html  View
580628 55693 CVE-2012-2450 OVAL:oval:org.mitre.oval:def:16852  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
29598 JVNDB-2012-005305 Advanced Productivity Software DTE Axiom における認証を回避される脆弱性 Advanced Productivity Software DTE Axiom は、登録 (registration) ID を確認しないため、認証を回避され、ユーザ、顧客、およびプロジェクトに関するデータを読まれる、または変更される脆弱性が存在します。 CVE-2012-2455 55693 6.4 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005305.html  View