CVE-2012-1515

VMware ESXi 3.5, 4.0, and 4.1 and ESX 3.5, 4.0, and 4.1 do not properly implement port-based I/O operations, which allows guest OS users to gain guest OS privileges by overwriting memory locations in a read-only memory block associated with the Virtual DOS Machine.

Affected products

Vmware Esxi, Windows

Vmware Esxi

= 3.5, 4.0, 4.1

CVSS 2.0

8.3 HIGH

EPSS

0.8% (54th percentile)

Weakness

CWE-264

NVD status

Modified

Published

2012-04-02