KLA11164 Multiple vulnerabilities in VMware products

🗓️ 19 Dec 2017 00:00:00Reported by Kaspersky LabType

kaspersky🔗 threats.kaspersky.com👁 60 Views

Multiple vulnerabilities in VMware products, including VNC remote code execution, ESXi host client cross site scripting, and vCenter server appliance privilege escalation. Impact: Arbitrary code execution, security bypass, privilege escalation. Affected products: VMware Workstation, Fusion, ESXi, and vCenter Server Appliance

Reporter	Title	Published	Views	Family All 41
IBM Security Bulletins	Security Bulletin: IBM PureApplication Service/Systems, which includes IBM OS Images for Red Hat Linux Systems, as well as AIX-based and Windows-based deployments, has released a fix in response to the vulnerabilities known as Spectre and Meltdown.	20 Jun 201915:05	–	ibm
IBM Security Bulletins	Security Bulletin: Open Source VMware Fusion Vulnerabilities in IBM Pure Application System (CVE-2017-4903, CVE-2017-4904, CVE-2017-4905)	25 Jun 201919:40	–	ibm
CNVD	Multiple Vmware Product Stack Overflow Vulnerabilities	20 Dec 201700:00	–	cnvd
CNVD	Heap Overflow Vulnerability in Multiple Vmware Products	20 Dec 201700:00	–	cnvd
CNVD	Vmware ESXi Host Client Cross-Site Scripting Vulnerability	20 Dec 201700:00	–	cnvd
CNVD	VMware vCenter Server Appliance Local Elevation of Privilege Vulnerability	20 Dec 201700:00	–	cnvd
Check Point Advisories	VMware VNC VMWDynResolution Heap Buffer Overflow (CVE-2017-4933)	14 May 201800:00	–	checkpoint_advisories
CVE	CVE-2017-4933	20 Dec 201715:00	–	cve
CVE	CVE-2017-4940	20 Dec 201715:00	–	cve
CVE	CVE-2017-4941	20 Dec 201715:00	–	cve

Source	Link
vmware	www.vmware.com/security/advisories/VMSA-2017-0015.html
threats	www.threats.kaspersky.com/en/product/VMware-Workstation/
threats	www.threats.kaspersky.com/en/product/VMware-Fusion/
threats	www.threats.kaspersky.com/en/product/VMware-vCenter-Server/
statistics	www.statistics.securelist.com/

22 Jan 2024 00:00Current

7.9High risk

Vulners AI Score7.9

CVSS 27.2

CVSS 3.18.8

CVSS 37.8

EPSS0.07078