PT-2017-16190 · Vmware · Vmware Workstation Player+1

Published 2017-06-07 · Updated 2017-07-17 · CVE-2017-4899

Positive Technologies (AI Summary)

CVSS v3.1

4.7

Medium

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions VMware Workstation Pro/Player versions prior to 12.5.3

Description The issue exists in the SVGA driver, allowing an attacker to crash the VM or trigger an out-of-bound read. This can be triggered only when the host has no graphics card or no graphics drivers are installed.

Recommendations For versions prior to 12.5.3, update to version 12.5.3 or later to resolve the issue.

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2017-4899

Affected Products

Vmware Workstation

Vmware Workstation Player

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2017-4899 · Security Note
• https://osv.dev/vulnerability/CVE-2017-4899 · Vendor Advisory
• http://vmware.com/security/advisories/VMSA-2017-0003.html · Vendor Advisory
• http://securityfocus.com/bid/96771 · Note
• http://securitytracker.com/id/1037979 · Note