CVE-2012-2449

CVE-2012-2449 describes a critical vulnerability in various VMware products, including Workstation, Player, Fusion, ESXi, and ESX, where improper configuration of the virtual floppy device allows guest OS users with administrative privileges to trigger an out-of-bounds write. This flaw can lead to a denial of service (VMX process crash) or potentially arbitrary code execution on the host system. With a CVSS score of 9.0, this vulnerability is considered highly severe due to its network-based attack vector and complete compromise potential for confidentiality, integrity, and availability. Despite its severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.