PT-2012-3321 · Vmware+1 · Vmware Esxi+1

Published 2012-04-02 · Updated 2018-10-12 · CVE-2012-1515

Positive Technologies (AI Summary)

CVSS v2.0

8.3

High

Base vector

AV:A/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions VMware ESXi versions 3.5 through 4.1 VMware ESX versions 3.5 through 4.1

Description The issue concerns improper implementation of port-based I/O operations, allowing guest OS users to gain guest OS privileges by overwriting memory locations in a read-only memory block associated with the Virtual DOS Machine. Additionally, there is an elevation of privilege issue related to how Windows handles BIOS memory, which could allow an attacker to run arbitrary code in kernel mode, enabling them to install programs, view, change, or delete data, or create new accounts with full administrative rights.

Recommendations For VMware ESXi versions 3.5 through 4.1, consider restricting access to the Virtual DOS Machine to minimize the risk of exploitation. For VMware ESX versions 3.5 through 4.1, consider restricting access to the Virtual DOS Machine to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2012-1515

Affected Products

Vmware Esxi

Windows

References · 12

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1515 · Security Note
• http://vmware.com/security/advisories/VMSA-2012-0006.html · Vendor Advisory
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-042 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-1515 · Security Note
• http://technet.microsoft.com/en-us/security/bulletin/ms12-042 · Note
• http://us-cert.gov/cas/techalerts/TA12-164A.html · Note
• http://securitytracker.com/id?1026875 · Note
• http://securityfocus.com/bid/52820 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15209 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17110 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/74480 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1515 · Note