PT-2017-2235 · Vmware · Workstation Pro+5
Publicado
2017-03-30
·
Atualizado
2022-02-03
·
CVE-2017-4902
CVSS v3.1
8.8
Alta
| Vetor | AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
VMware ESXi versions 6.5 without patch ESXi650-201703410-SG
VMware ESXi version 5.5 without patch ESXi550-201703401-SG
Workstation Pro / Player versions 12.x prior to 12.5.5
Fusion Pro / Fusion versions 8.x prior to 8.5.6
Description
The issue is related to a Heap Buffer Overflow in SVGA, which may allow a guest to execute code on the host. This could potentially enable an attacker to execute arbitrary code in the host system. The estimated number of potentially affected devices worldwide is not specified. There is no information provided about real-world incidents where this issue was exploited.
Recommendations
For VMware ESXi version 5.5, apply patch ESXi550-201703401-SG.
For VMware ESXi version 6.5, apply patch ESXi650-201703410-SG.
For Workstation Pro / Player versions 12.x, update to version 12.5.5 or later.
For Fusion Pro / Fusion versions 8.x, update to version 8.5.6 or later.
Correção
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Fusion
Fusion Pro
Vmware Esxi
Vmware Workstation
Workstation Player
Workstation Pro