Lucene search

CVE-2017-4902

🗓️ 07 Jun 2017 18:00:29Reported by vmwareType

VMware ESXi 6.5 & 5.5, Workstation Pro/Player 12.x < 12.5.5, Fusion Pro/Fusion 8.x < 8.5.6 have Heap Buffer Overflow in SVGA

Reporter	Title	Published	Views	Family All 17
NVD	CVE-2017-4902	7 Jun 201718:29	–	nvd
Prion	Heap overflow	7 Jun 201718:29	–	prion
Zero Day Initiative	VMware Workstation SVGA Heap-based Buffer Overflow Privilege Escalation Vulnerability	30 Mar 201700:00	–	zdi
Zero Day Initiative	VMware Workstation SVGA Heap-based Buffer Overflow Privilege Escalation Vulnerability	30 Mar 201700:00	–	zdi
Cvelist	CVE-2017-4902	7 Jun 201718:00	–	cvelist
Tenable Nessus	ESXi 5.5 < Build 5230635 Multiple Vulnerabilities (VMSA-2017-0006) (remote check) (PCI-DSS check)	28 Mar 202200:00	–	nessus
Tenable Nessus	VMware Workstation 12.x < 12.5.5 Multiple Vulnerabilities (VMSA-2017-0006)	30 Mar 201700:00	–	nessus
Tenable Nessus	VMSA-2017-0006 : VMware ESXi, Workstation and Fusion updates address critical and moderate security issues	30 Mar 201700:00	–	nessus
Tenable Nessus	VMware Workstation 12.x < 12.5.5 Multiple Vulnerabilities (VMSA-2017-0006) (Linux)	30 Mar 201700:00	–	nessus
Tenable Nessus	VMware Fusion 8.x < 8.5.6 Multiple Vulnerabilities (VMSA-2017-0006) (macOS)	30 Mar 201700:00	–	nessus

Nvd

Node

vmware workstation_playerRange12.0.0–12.5.5

vmware workstation_proRange12.0.0–12.5.5

vmware esxiMatch5.5-

vmware esxiMatch5.51

vmware esxiMatch5.52

vmware esxiMatch5.53a

vmware esxiMatch5.53b

vmware esxiMatch6.5-

vmware esxiMatch6.5650-201701001

vmware esxiMatch6.5650-201703001

vmware esxiMatch6.5650-201703002

Node

vmware fusionRange8.0.0–8.5.6

vmware fusion_proRange8.0.0–8.5.6

AND

apple mac_os_xMatch-

[
  {
    "product": "ESXi",
    "vendor": "VMware",
    "versions": [
      {
        "status": "affected",
        "version": "6.5 without patch ESXi650-201703410-SG"
      },
      {
        "status": "affected",
        "version": "5.5 without patch ESXi550-201703401-SG"
      }
    ]
  },
  {
    "product": "Workstation Pro / Player",
    "vendor": "VMware",
    "versions": [
      {
        "status": "affected",
        "version": "12.x prior to 12.5.5"
      }
    ]
  },
  {
    "product": "Fusion Pro / Fusion",
    "vendor": "VMware",
    "versions": [
      {
        "status": "affected",
        "version": "8.x prior to 8.5.6"
      }
    ]
  }
]

Source	Link
securitytracker	www.securitytracker.com/id/1038149
vmware	www.vmware.com/security/advisories/VMSA-2017-0006.html
securityfocus	www.securityfocus.com/bid/97163
securitytracker	www.securitytracker.com/id/1038148

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

07 Jun 2017 18:29Current

8.6High risk

Vulners AI Score8.6

CVSS27.2

CVSS38.8

EPSS0.001

CWE-119