CVE-2012-3288: VMware Esx

High severity, CVSS 9.3. EPSS: 3.8% chance of exploitation in the next 30 days.

VMware Workstation 7.x before 7.1.6 and 8.x before 8.0.4, VMware Player 3.x before 3.1.6 and 4.x before 4.0.4, VMware Fusion 4.x before 4.1.3, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 through 4.1 allow user-assisted remote attackers to execute arbitrary code on the host OS or cause a denial of service (memory corruption) on the host OS via a crafted Checkpoint file.

Affected products

• VMware Esx: version 3.5 only; version 4.0 only; version 4.1 only
• VMware ESXi: version 3.5 only; version 4.0 only; version 4.1 only; version 5.0 only
• VMware Fusion: version 4.0 only; version 4.0.1 only; version 4.0.2 only; version 4.1 only; version 4.1.1 only; version 4.1.2 only
• VMware Player: version 3.0 only; version 3.0.1 only; version 3.1 only; version 3.1.1 only; version 3.1.2 only; version 3.1.3 only; …
• VMware Workstation: version 7.0 only; version 7.0.1 only; version 7.1 only; version 7.1.1 only; version 7.1.2 only; version 7.1.3 only; …

Published 2012-06-14. Last modified 2026-06-16.