CVE-2012-1517
The VMX process in VMware ESXi 4.1 and ESX 4.1 does not properly handle RPC commands, which...
The VMX process in VMware ESXi 4.1 and ESX 4.1 does not properly handle RPC commands, which allows guest OS users to cause a denial of service (memory overwrite and process crash) or possibly execute arbitrary code on the host OS via vectors involving function pointers.
Exploit likelihood
What each source reports
NVD Score used
The VMX process in VMware ESXi 4.1 and ESX 4.1 does not properly handle RPC commands, which allows guest OS users to cause a denial of service (memory overwrite and process crash) or possibly execute arbitrary code on the host OS via vectors involving function pointers.
- Record
CVE-2012-1517- CVSS 2.0
- 9.0 High
AV:N/AC:L/Au:S/C:C/I:C/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
The VMX process in VMware ESXi 4.1 and ESX 4.1 does not properly handle RPC commands, which allows guest OS users to cause a denial of service (memory overwrite and process crash) or possibly execute arbitrary code on the host OS via vectors involving function pointers.
- Record
CVE-2012-1517- Updated
- 2026-11-02
EUVDEUVD-2012-1535 No score
The VMX process in VMware ESXi 4.1 and ESX 4.1 does not properly handle RPC commands, which allows guest OS users to cause a denial of service (memory overwrite and process crash) or possibly execute arbitrary code on the host OS via vectors involving function pointers.
- Record
EUVD-2012-1535- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-vx8r-2h9j-5r4f No score
The VMX process in VMware ESXi 4.1 and ESX 4.1 does not properly handle RPC commands, which...
The VMX process in VMware ESXi 4.1 and ESX 4.1 does not properly handle RPC commands, which allows guest OS users to cause a denial of service (memory overwrite and process crash) or possibly execute arbitrary code on the host OS via vectors involving function pointers.
- Record
GHSA-vx8r-2h9j-5r4f- Weakness
- CWE-119
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2012-1517 is a high vulnerability (CVSS 9.0) in Vmware Esx, published May 4, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.43%, the 84th percentile. No source names a fixed version.
References
osvdb.org/81692
vmware.com/security/advisories/VMSA-2012-0009.html
securitytracker.com/id?1027018
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17231
securityfocus.com/bid/53369
exchange.xforce.ibmcloud.com/vulnerabilities/75374
nvd.nist.gov/vuln/detail/CVE-2012-1517
github.com/advisories/GHSA-vx8r-2h9j-5r4f