VMware Workstation 8.x before 8.0.4, VMware Player 4.x before 4.0.4, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 through 4.1 allow remote attackers to cause a denial of service (guest OS crash) via crafted traffic from a remote virtual device.
| Software | From | Fixed in |
|---|---|---|
| vmware / workstation | 8.0.3 | 8.0.3.x |
| vmware / workstation | 8.0.1 | 8.0.1.x |
| vmware / workstation | 8.0.2 | 8.0.2.x |
| vmware / workstation | 8.0 | 8.0.x |
| vmware / player | 4.0.3 | 4.0.3.x |
| vmware / player | 4.0.1 | 4.0.1.x |
| vmware / player | 4.0.2 | 4.0.2.x |
| vmware / player | 4.0 | 4.0.x |
| vmware / esx | 3.5-update2 | 3.5-update2.x |
| vmware / esxi | 4.1 | 4.1.x |
| vmware / esxi | 4.0-1 | 4.0-1.x |
| vmware / esxi | 3.5 | 3.5.x |
| vmware / esxi | 4.0 | 4.0.x |
| vmware / esx | 4.1 | 4.1.x |
| vmware / esxi | 4.0-3 | 4.0-3.x |
| vmware / esx | 3.5-update1 | 3.5-update1.x |
| vmware / esxi | 5.0 | 5.0.x |
| vmware / esxi | 4.1-2 | 4.1-2.x |
| vmware / esxi | 3.5-1 | 3.5-1.x |
| vmware / esx | 3.5 | 3.5.x |
| vmware / esxi | 4.1-1 | 4.1-1.x |
| vmware / esx | 3.5-update3 | 3.5-update3.x |
| vmware / esx | 4.0 | 4.0.x |
| vmware / esxi | 4.0-4 | 4.0-4.x |
| vmware / esxi | 4.0-2 | 4.0-2.x |