PT-2012-3316 · Microsoft+1 · Wddm+2

Published 2012-03-16 · Updated 2017-12-13 · CVE-2012-1510

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions VMware ESXi versions 4.0 through 5.0 VMware ESX versions 4.0 through 4.1 VMware View versions prior to 4.6.1

Description A buffer overflow issue exists in the WDDM display driver, allowing guest OS users to gain guest OS privileges via unspecified vectors.

Recommendations For VMware ESXi versions 4.0 through 5.0, update to a version that includes the fix for this issue. For VMware ESX versions 4.0 through 4.1, update to a version that includes the fix for this issue. For VMware View versions prior to 4.6.1, update to version 4.6.1 or later.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2012-1510

Affected Products

Vmware Esxi

Vmware View

Wddm

References · 13

• http://vmware.com/security/advisories/VMSA-2012-0004.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-1510 · Security Note
• http://vmware.com/security/advisories/VMSA-2012-0005.html · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1510 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17258 · Note
• http://securitytracker.com/id?1026814 · Note
• http://securityfocus.com/bid/52524 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/74097 · Note
• http://secunia.com/advisories/48378 · Note
• http://archives.neohapsis.com/archives/bugtraq/2012-03/0071.html · Note
• http://secunia.com/advisories/48379 · Note
• http://securitytracker.com/id?1026818 · Note
• http://osvdb.org/80117 · Note