CVE-2017-4916 VMware Workstation Pro/Player contains a NULL pointer dereference vulnerability that exists in the vstor2 driver. Successful exploitation of this issue may allow host users with normal user privileges...
MediumCVSS 6.5
EPSS 5.0%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
VMware Workstation Pro/Player contains a NULL pointer dereference vulnerability that exists in the vstor2 driver. Successful exploitation of this issue may allow host users with normal user privileges to trigger a denial-of-service in a Windows host machine.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| VMware workstation player | = 12.0.0 | No fix listed |
| VMware workstation pro | = 12.0.0 | No fix listed |
| VMware Workstation Pro/Player | = All 12.x versions prior to version 12.5.6 | No fix listed |
References
- 98560 third-party-advisory vdb-entry
- 1038526 vdb-entry
- 42140 exploit
- www.vmware.com patch vendor-advisory