Unscored severity · published Mar 16, 2012
CVE-2012-1509
Buffer overflow in the XPDM display driver in VMware View before 4.6.1 allows guest OS users to gain guest OS privileges via unspecified vectors
–
CVSS
0.4%
EPSS
No
On KEV
Description
Buffer overflow in the XPDM display driver in VMware View before 4.6.1 allows guest OS users to gain guest OS privileges via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 38% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
VI
View · Vmware
through 4.6.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-1509
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-1509
archives.neohapsis.com
http://archives.neohapsis.com/archives/bugtraq/2012-03/0071.html
osvdb.org
http://osvdb.org/80116
secunia.com
http://secunia.com/advisories/48379
www.securityfocus.com
http://www.securityfocus.com/bid/52524
www.securitytracker.com
http://www.securitytracker.com/id?1026814
www.vmware.com
http://www.vmware.com/security/advisories/VMSA-2012-0004.html
More from View
–
CVE-2013-1406
The Virtual Machine Communication Interface (VMCI) implementation in vmci.sys in VMware Workstation 8.x before 8.0.5 and 9.x before 9.0.1 on Windows, VMware Fusion 4.1 before…
–
CVE-2012-5978
Multiple directory traversal vulnerabilities in the (1) View Connection Server and (2) View Security Server in VMware View 4.x before 4.6.2 and 5.x before 5.1.2 allow remote…
–
CVE-2012-1666
Untrusted search path vulnerability in VMware Tools in VMware Workstation before 8.0.4, VMware Player before 4.0.4, VMware Fusion before 4.1.2, VMware View before 5.1, and VMware…
–
CVE-2012-1511
Cross-site scripting (XSS) vulnerability in View Manager Portal in VMware View before 4.6.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL
–
CVE-2012-1510
Buffer overflow in the WDDM display driver in VMware ESXi 4.0, 4.1, and 5.0; VMware ESX 4.0 and 4.1; and VMware View before 4.6.1 allows guest OS users to gain guest OS privileges…
