CVE-2012-2448

VMware ESXi 3.5-5.0 and ESX 3.5-4.1 - Remote Code Execution via NFS Traffic

Title source: llm
STIX 2.1

Description

VMware ESXi 3.5 through 5.0 and ESX 3.5 through 4.1 allow remote attackers to execute arbitrary code or cause a denial of service (memory overwrite) via NFS traffic.

References (5)

Core 5
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/81693
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1027018
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/75375
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/53371

Scores

EPSS 0.0214
EPSS Percentile 84.4%

Details

CWE
CWE-119
Status published
Products (7)
vmware/esx 3.5 (4 CPE variants)
vmware/esx 4.0
vmware/esx 4.1
vmware/esxi 3.5 (2 CPE variants)
vmware/esxi 4.0 (5 CPE variants)
vmware/esxi 4.1 (3 CPE variants)
vmware/esxi 5.0
Published May 04, 2012
Tracked Since Feb 18, 2026