漏洞类别：Local
漏洞等级： 
漏洞信息
VMware Workstation is a hosted hypervisor that runs on x64 versions of Windows and Linux operating systems.
VMware Workstation update addresses multiple security issues
a. VMware Workstation Insecure library loading vulnerability
b. VMware Workstation NULL pointer dereference vulnerability
A vulnerability was reported in VMware Workstation Pro/Player. A local user on the host system can cause denial of service conditions on the host system. Also a local user on the host system can obtain root privileges on the host system.
Affected Versions
Workstation Pro and Workstation Player 12.x
漏洞危害
A local user on the host system can cause denial of service conditions on the host system.
A local user on the host system can obtain root privileges on the host system.
解决方案
The vendor has issued a fix (12.5.6). For more details refer this advisory VMSA-2017-0009
Patch:
Following are links for downloading patches to fix the vulnerabilities:
0daybank
文章评论