CVE-2017-4900

Public PoC / Exploit (1)

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

VMware Workstation Pro/Player 12.x before 12.5.3 contains a NULL pointer dereference vulnerability that exists in the SVGA driver. Successful exploitation of this issue may allow attackers with normal user privileges to crash their VMs.

Weaknesses (CWE)

CWE-476

Affected Products (12)

vmware · workstation_playervulnerable

vmware · workstation_provulnerable

References (6)

http://www.securityfocus.com/bid/96770

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1037979

http://www.vmware.com/security/advisories/VMSA-2017-0003.html

PatchVendor Advisory

http://www.securityfocus.com/bid/96770

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1037979

http://www.vmware.com/security/advisories/VMSA-2017-0003.html

PatchVendor Advisory