CVE-2012-1516

Related Files

VMware Backdoor Response Uninitialized Memory Potential VM Break

Posted May 6, 2012

Authored by Derek Soeder

The vulnerability described in this document could hypothetically be exploited by unprivileged code running in a VMware virtual machine (guest) in order to execute code in the host VMX process, thereby breaking out of the virtual machine; however, such exploitation has not been proven. In the event that arbitrary code execution in the VMX process is possible, kernel privileges can be obtained on a Windows host by abusing the VMX process's special access to a VMware driver, meaning the maximum possible impact of this vulnerability is elevation from unprivileged guest code execution to host kernel code execution.

tags | exploit, arbitrary, kernel, code execution

systems | windows

advisories | CVE-2012-1516

SHA-256 | faaa583588ea28e78dd0709b7d226804732abda76965a7dc1e8370600d08440f

Download | Favorite | View

VMware Security Advisory 2012-0009

Posted May 3, 2012

Authored by VMware | Site vmware.com

VMware Security Advisory 2012-0009 - VMware Workstation, Player, ESXi and ESX patches address critical security issues.

tags | advisory

advisories | CVE-2012-1516, CVE-2012-1517, CVE-2012-2448, CVE-2012-2449, CVE-2012-2450

SHA-256 | eb075b48375e4e244ac290d95f092560fec992c243117c80698f4db787b4f60a

Download | Favorite | View