PT-2017-16221 · Vmware · Vmware Workstation

Publicado 2017-11-17 · Atualizado 2017-12-03 · CVE-2017-4939

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 12.x through 12.5.7

Description The issue exists due to some DLL files loaded by the application improperly, which may allow an attacker to load a DLL file of their choosing that could execute arbitrary code. This is a result of a DLL hijacking issue in the installer.

Recommendations For versions 12.x through 12.5.7, update to version 12.5.8 or later to resolve the issue.

Correção

Untrusted Search Path

Enumeração de Fraquezas

CWE-426

Identificadores relacionados

CVE-2017-4939

Produtos afetados

Vmware Workstation

Referências · 4

• https://osv.dev/vulnerability/CVE-2017-4939 · Aviso do Fabricante
• http://securityfocus.com/bid/101890 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-4939 · Nota de Segurança
• https://vmware.com/security/advisories/VMSA-2017-0018.html · Aviso do Fabricante