CVE漏洞中文网

0DayBank一个专门收集整理全球互联网漏洞的公开发布网站
  1. 首页
  2. CVE
  3. 正文

CVE-2017-4898 VMware Workstation Multiple Vulnerabilities.(VMSA-2017-0003)

2017年4月12日 1101点热度 0人点赞 0条评论

漏洞类别:Local

漏洞等级:

漏洞信息

VMware Workstation is a hosted hypervisor that runs on x64 versions of Windows and Linux operating systems.

VMware Workstation update addresses multiple security issues
a. VMware Workstation DLL loading vulnerability
b. VMware Workstation SVGA driver vulnerability
c. VMware Workstation NULL pointer dereference vulnerability

Affected Versions
VMware Workstation Pro 12.x
VMware Workstation Player 12.x

漏洞危害

Successful exploitation of this issue may allow normal users to escalate privileges to System in the host machine where VMware Workstation is installed.(CVE-2017-4898)
An attacker may exploit this issue to crash the VM or trigger an out-of-bound read. (CVE-2017-4899)
Successful exploitation of this issue may allow attackers with normal user privileges to crash their VMs. (CVE-2017-4900)

解决方案

Vendor has released fix to these issues (12.5.3). For more details refer this advisory VMSA-2017-0003

Patch:
Following are links for downloading patches to fix the vulnerabilities:

VMSA-2017-0003: Windows

0day

标签: 暂无
最后更新:2017年4月12日

小助手

这个人很懒,什么都没留下

点赞
< 上一篇
下一篇 >

文章评论

您需要 登录 之后才可以评论

COPYRIGHT © 2024 www.pdr.cn CVE漏洞中文网. ALL RIGHTS RESERVED.

鲁ICP备2022031030号

联系邮箱:wpbgssyubnmsxxxkkk@proton.me