VMware Workstation 8.x before 8.0.4, VMware Player 4.x before 4.0.4, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 through 4.1 allow remote attackers to cause a denial of service (guest OS crash) via crafted traffic from a remote virtual device.
https://euvd.enisa.europa.eu/vulnerability/EUVD-2012-3267
http://www.vmware.com/security/advisories/VMSA-2012-0011.html