Lucene search

[email protected]CVE-2017-4898

HistoryJun 07, 2017 - 6:29 p.m.

CVE-2017-4898

2017-06-0718:29:00

NVD-CWE-noinfo

[email protected]

web.nvd.nist.gov

vmware

workstation

pro

player

12.x

12.5.3

dll loading

vulnerability

escalation of privileges

cve-2017-4898

nvd

8.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

8.5 High

AI Score

Confidence

High

6.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

20.5%

JSON

VMware Workstation Pro/Player 12.x before 12.5.3 contains a DLL loading vulnerability that occurs due to the “vmware-vmx” process loading DLLs from a path defined in the local environment-variable. Successful exploitation of this issue may allow normal users to escalate privileges to System in the host machine where VMware Workstation is installed.

CPENameOperatorVersion
vmware:workstation_playervmware workstation playereq12.0.0
vmware:workstation_playervmware workstation playereq12.5.1
vmware:workstation_provmware workstation proeq12.5.2
vmware:workstation_provmware workstation proeq12.0.1
vmware:workstation_playervmware workstation playereq12.5.2
vmware:workstation_provmware workstation proeq12.1.0
vmware:workstation_provmware workstation proeq12.5.1
vmware:workstation_playervmware workstation playereq12.1.0
vmware:workstation_playervmware workstation playereq12.0.1
vmware:workstation_provmware workstation proeq12.5.0

CPE	Name	Operator	Version
vmware:workstation_player	vmware workstation player	eq	12.0.0
vmware:workstation_player	vmware workstation player	eq	12.5.1
vmware:workstation_pro	vmware workstation pro	eq	12.5.2
vmware:workstation_pro	vmware workstation pro	eq	12.0.1
vmware:workstation_player	vmware workstation player	eq	12.5.2
vmware:workstation_pro	vmware workstation pro	eq	12.1.0
vmware:workstation_pro	vmware workstation pro	eq	12.5.1
vmware:workstation_player	vmware workstation player	eq	12.1.0
vmware:workstation_player	vmware workstation player	eq	12.0.1
vmware:workstation_pro	vmware workstation pro	eq	12.5.0

Rows per page:

1-10 of 121

References

www.securityfocus.com/bid/96772

www.securitytracker.com/id/1037979

www.vmware.com/security/advisories/VMSA-2017-0003.html

8.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

8.5 High

AI Score

Confidence

High

6.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

20.5%

JSON

Related for CVE-2017-4898

cvelist1 prion1 kaspersky1 vmware1 nessus1 openvas1