CVE-2012-3288
Estado: ModificadaAlta (9.3)—
VMware Workstation 7.x before 7.1.6 and 8.x before 8.0.4, VMware Player 3.x before 3.1.6 and 4.x before 4.0.4, VMware Fusion 4.x before 4.1.3, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 through 4.1 allow user-assisted remote attackers to execute arbitrary code on the host OS or cause a denial of service (memory corruption) on the host OS via a crafted Checkpoint file.
CVSS
- Versión: 2.0
- Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
- Puntuación base: 9.3
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 3.84%
- Percentil entre todas las CVEs puntuadas: 90
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (5)
CWE
- CWE-20
Referencias
- http://www.vmware.com/security/advisories/VMSA-2012-0011.html
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17178
- http://www.vmware.com/security/advisories/VMSA-2012-0011.html
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17178
JSON original (NVD)
Mostrar
{
"id": "CVE-2012-3288",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 9.3,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
"authentication": "NONE",
"integrityImpact": "COMPLETE",
"accessComplexity": "MEDIUM",
"availabilityImpact": "COMPLETE",
"confidentialityImpact": "COMPLETE"
},
"acInsufInfo": false,
"impactScore": 10,
"baseSeverity": "HIGH",
"obtainAllPrivilege": false,
"exploitabilityScore": 8.6,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": true
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2012-06-14T20:55:01.420",
"references": [
{
"url": "http://www.vmware.com/security/advisories/VMSA-2012-0011.html",
"tags": [
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17178",
"source": "cve@mitre.org"
},
{
"url": "http://www.vmware.com/security/advisories/VMSA-2012-0011.html",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17178",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-20"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "VMware Workstation 7.x before 7.1.6 and 8.x before 8.0.4, VMware Player 3.x before 3.1.6 and 4.x before 4.0.4, VMware Fusion 4.x before 4.1.3, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 through 4.1 allow user-assisted remote attackers to execute arbitrary code on the host OS or cause a denial of service (memory corruption) on the host OS via a crafted Checkpoint file."
},
{
"lang": "es",
"value": "VMware Workstation v7.x antes de v7.1.6 y v8.x antes de v8.0.4, VMware Player v3.x antes de v3.1.6 y v4.x antes de v4.0.4, VMware Fusion v4.x antes de 4.1.3, VMware ESXi v3.5 a v5.0 y VMware ESX v3.5 a v4.1 permite ejecutar código de su elección en el sistema operativo anfitrión a atacantes remotos (con cierta ayuda de usuarios locales) o causar una denegación de servicio (por corrupción de memoria) en el sistema operativo anfitrión a través de un archivo Checkpoint modificado."
}
],
"lastModified": "2026-06-16T23:42:56.107",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:vmware:workstation:7.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AB33DBC9-3B63-457E-A353-B9E7378211AE"
},
{
"criteria": "cpe:2.3:a:vmware:workstation:7.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "34F436D4-B7B7-43CB-A2BD-C5E791F7E3C3"
},
{
"criteria": "cpe:2.3:a:vmware:workstation:7.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BF53DB66-4C79-47BB-AABD-6DCE2EF98E1E"
},
{
"criteria": "cpe:2.3:a:vmware:workstation:7.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "13A31E93-7671-492E-A78F-89CF4703B04D"
},
{
"criteria": "cpe:2.3:a:vmware:workstation:7.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "99ADA116-A571-4788-8DF2-09E8A2AF92F4"
},
{
"criteria": "cpe:2.3:a:vmware:workstation:7.1.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2818FD22-8BC5-4803-8D62-D7C7C22556F9"
},
{
"criteria": "cpe:2.3:a:vmware:workstation:7.1.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7C8C76F3-05B5-43EA-AE70-A026AC6001DA"
},
{
"criteria": "cpe:2.3:a:vmware:workstation:7.1.4.16648:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6205C8AE-63AB-4501-B311-30A9F806DC82"
},
{
"criteria": "cpe:2.3:a:vmware:workstation:7.1.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "019FEA3B-970B-4959-A500-D9AD39C58C11"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:vmware:workstation:8.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FCE22BB0-F375-4883-BF6C-5A6369694EF3"
},
{
"criteria": "cpe:2.3:a:vmware:workstation:8.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AD913295-9302-425A-A9E1-B0DF76AD3069"
},
{
"criteria": "cpe:2.3:a:vmware:workstation:8.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "51B6CAE2-A396-40C8-8FF0-D9EC64D5C9A0"
},
{
"criteria": "cpe:2.3:a:vmware:workstation:8.0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "21644868-F1B0-4A8E-BE73-4F42BEB8E834"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:vmware:player:3.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5F747AC1-E163-41A4-BAC7-FDF46F4057D5"
},
{
"criteria": "cpe:2.3:a:vmware:player:3.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5A115959-9CDA-45ED-9002-BA1A31074E81"
},
{
"criteria": "cpe:2.3:a:vmware:player:3.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C158CD97-41BA-4422-9A55-B1A8650A0900"
},
{
"criteria": "cpe:2.3:a:vmware:player:3.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "477D5F22-7DDD-461D-9CD1-2B2A968F6CB7"
},
{
"criteria": "cpe:2.3:a:vmware:player:3.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C174C452-7249-4B26-9F26-DFE9B3476874"
},
{
"criteria": "cpe:2.3:a:vmware:player:3.1.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DAA72ED8-3229-4220-BE75-712CA6E21062"
},
{
"criteria": "cpe:2.3:a:vmware:player:3.1.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "57E06DA2-CB18-45E6-9F88-B3B6E0507816"
},
{
"criteria": "cpe:2.3:a:vmware:player:3.1.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EB9D2803-D06D-4CD6-98D5-0E74CFC13B99"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:vmware:player:4.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "535E3D3C-76A5-405A-8F9D-21A86ED31D07"
},
{
"criteria": "cpe:2.3:a:vmware:player:4.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7D09D7FB-78EE-4168-996D-FD3CF2E187BD"
},
{
"criteria": "cpe:2.3:a:vmware:player:4.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "816F1646-A1C9-4E4A-BCE1-A34D00B51ABE"
},
{
"criteria": "cpe:2.3:a:vmware:player:4.0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6D5FD2D7-9928-437B-8988-4FC955DE4F84"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:vmware:fusion:4.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "60234129-7F7F-49FA-A425-CDAB4D09AB23"
},
{
"criteria": "cpe:2.3:a:vmware:fusion:4.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4FB73EC4-F3CE-428B-BA40-47FB21181543"
},
{
"criteria": "cpe:2.3:a:vmware:fusion:4.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "927863C2-5A61-4137-83AC-6CF3F2958941"
},
{
"criteria": "cpe:2.3:a:vmware:fusion:4.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F74559CB-6E52-421F-88F3-739913C26C8E"
},
{
"criteria": "cpe:2.3:a:vmware:fusion:4.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4870DAA2-6670-47EF-BF74-6E39B92E75DB"
},
{
"criteria": "cpe:2.3:a:vmware:fusion:4.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "70C64B80-4928-4ABA-AF4E-1977C252BAEE"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:vmware:esx:3.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BFF29100-E124-4416-95CF-18B4246D43F2"
},
{
"criteria": "cpe:2.3:o:vmware:esx:3.5:update1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "37A5D726-3D38-44D5-B509-1B8B003903A0"
},
{
"criteria": "cpe:2.3:o:vmware:esx:3.5:update2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A4DA3B20-A743-4F37-A095-65161FFBEB73"
},
{
"criteria": "cpe:2.3:o:vmware:esx:3.5:update3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FF7C3C65-BE63-407E-9CFD-E571025C3E79"
},
{
"criteria": "cpe:2.3:o:vmware:esx:4.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BC337BB7-9A45-4406-A783-851F279130EE"
},
{
"criteria": "cpe:2.3:o:vmware:esx:4.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0B6BA46F-4E8C-4B2A-AE92-81B9F1B4D56C"
},
{
"criteria": "cpe:2.3:o:vmware:esxi:3.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FAE88D8C-9CC3-46D1-9F26-290BC679F47E"
},
{
"criteria": "cpe:2.3:o:vmware:esxi:3.5:1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "58ED8AB4-0FDF-4752-B44E-56F58593CE41"
},
{
"criteria": "cpe:2.3:o:vmware:esxi:4.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "13771B15-CD71-472A-BE56-718B87D5825D"
},
{
"criteria": "cpe:2.3:o:vmware:esxi:4.0:1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0A4E41C0-31FA-47AA-A9BF-B9A6C1D44801"
},
{
"criteria": "cpe:2.3:o:vmware:esxi:4.0:2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AF016EE7-083A-4D62-A6D4-2807EB47B6DB"
},
{
"criteria": "cpe:2.3:o:vmware:esxi:4.0:3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8F11844A-3C6C-4AA5-87DC-979AFF62867A"
},
{
"criteria": "cpe:2.3:o:vmware:esxi:4.0:4:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AC463653-A599-45CF-8EA9-8854D5C59963"
},
{
"criteria": "cpe:2.3:o:vmware:esxi:4.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4BDE707D-A1F4-4829-843E-F6633BB84D6D"
},
{
"criteria": "cpe:2.3:o:vmware:esxi:4.1:1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4DC5C2BF-6EC6-436F-A925-469E87249C8A"
},
{
"criteria": "cpe:2.3:o:vmware:esxi:4.1:2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7BCE5DA9-BB88-4169-B77C-40B1F98D511A"
},
{
"criteria": "cpe:2.3:o:vmware:esxi:5.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E2331236-2E9B-4B52-81EE-B52DEB41ACE5"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "cve@mitre.org"
}