Servers and applications
CVE-2012-1517
The VMX process in VMware ESXi 4.1 and ESX 4.1 does not properly handle RPC commands, which allows guest OS users to cause a denial of service (memory overwrite and process crash) or possibly execute arbitrary code on the host OS via vectors involving function pointers.
- Severity
- High 9.0
- Published
- 4 May 2012
- Last changed
- 16 Jun 2026
- Added to UpHeron
- 1 Nov 2026
- Exploit chance
- 2.4% in the next 30 daysHigher than 84% of CVEs. EPSS by FIRST, 12 Nov 2026
- Weakness
- Memory buffer errors (CWE-119)
- Attack
- Over the network · Needs a login
- Attacker can
- Read data · Change data · Take it down
- CVSS vector
AV:N/AC:L/Au:S/C:C/I:C/A:C- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
VMware ESXiServers and applications · cpe:o:vmware:esxi |
|