CVE-2017-4915 VMware Workstation Pro/Player contains an insecure library loading vulnerability via ALSA sound driver configuration files. Successful exploitation of this issue may allow unprivileged host users to e...
HighCVSS 7.8
EPSS 5.4%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
VMware Workstation Pro/Player contains an insecure library loading vulnerability via ALSA sound driver configuration files. Successful exploitation of this issue may allow unprivileged host users to escalate their privileges to root in a Linux host machine.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| VMware workstation player | = 12.0.0 | No fix listed |
| VMware workstation pro | = 12.0.0 | No fix listed |
| VMware Workstation Pro/Player | = All 12.x versions prior to version 12.5.6 | No fix listed |
References
- 98566 third-party-advisory vdb-entry
- 1038525 vdb-entry
- 42045 exploit
- www.vmware.com patch vendor-advisory