CVE-2017-4898

Public PoC / Exploit (1)

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

VMware Workstation Pro/Player 12.x before 12.5.3 contains a DLL loading vulnerability that occurs due to the "vmware-vmx" process loading DLLs from a path defined in the local environment-variable. Successful exploitation of this issue may allow normal users to escalate privileges to System in the host machine where VMware Workstation is installed.

Affected Products (12)

vmware · workstation_playervulnerable

vmware · workstation_provulnerable

References (6)

http://www.securityfocus.com/bid/96772

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1037979

http://www.vmware.com/security/advisories/VMSA-2017-0003.html

PatchVendor Advisory

http://www.securityfocus.com/bid/96772

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1037979

http://www.vmware.com/security/advisories/VMSA-2017-0003.html

PatchVendor Advisory