CVE-2012-3289: VMware Esx

High severity, CVSS 7.8. EPSS: 1.7% chance of exploitation in the next 30 days.

VMware Workstation 8.x before 8.0.4, VMware Player 4.x before 4.0.4, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 through 4.1 allow remote attackers to cause a denial of service (guest OS crash) via crafted traffic from a remote virtual device.

Affected products

• VMware Esx: version 3.5 only; version 4.0 only; version 4.1 only
• VMware ESXi: version 3.5 only; version 4.0 only; version 4.1 only; version 5.0 only
• VMware Player: version 4.0 only; version 4.0.1 only; version 4.0.2 only; version 4.0.3 only
• VMware Workstation: version 8.0 only; version 8.0.1 only; version 8.0.2 only; version 8.0.3 only

Published 2012-06-14. Last modified 2026-06-16.