Multiple vulnerabilities have been reported in VMware ESX Server and VMware ESXi, which can be exploited by malicious, local users in a guest virtual machine to gain escalated privileges and by malicious people to cause a DoS (Denial of Service) and potentially compromise a vulnerable system.

1) An error within a handler function for RPC commands between the guest and a host process can be exploited to control values of certain pointers resulting in a buffer overflow in the host's VMX process.

2) An error when parsing NFS traffic can be exploited to corrupt memory.

3) An error in the virtual floppy device can be exploited to cause an out-of-bounds write.

4) An error in the virtual SCSI device can be exploited to cause an out-of-bounds write.

Successful exploitation may allow execution of arbitrary code.

Please see the vendor's advisory for a list of affected versions.

Solution
Update to a fixed version (please see the vendor's advisory for details).

Provided and/or discovered by
1) Derek Soeder
2 - 4) Reported by the vendor

Changelog
Further details available to Secunia VIM customers

Original Advisory
VMSA-2012-0009:
http://www.vmware.com/security/advisories/VMSA-2012-0009.html

Derek Soeder:
http://seclists.org/bugtraq/2012/May/22

Deep Links
Links available to Secunia VIM customers