VMware Workstation SVGA Device Code Execution Vulnerability - Windows

VMware Workstation is prone to a code execution vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:vmware:workstation...

Out-of-bounds

VMware ESXi ESXi 6.5 without patch ESXi650-201707101-SG, Workstation 12.x before 12.5.7 and Fusion 8.x before 8.5.8 contain an out-of-bounds write vulnerability in SVGA device. This issue may allow a guest to execute code on the host...

CVE-2017-4924

VMware ESXi ESXi 6.5 without patch ESXi650-201707101-SG, Workstation 12.x before 12.5.7 and Fusion 8.x before 8.5.8 contain an out-of-bounds write vulnerability in SVGA device. This issue may allow a guest to execute code on the host...

CVE-2017-4924

VMware ESXi ESXi 6.5 without patch ESXi650-201707101-SG, Workstation 12.x before 12.5.7 and Fusion 8.x before 8.5.8 contain an out-of-bounds write vulnerability in SVGA device. This issue may allow a guest to execute code on the host...

CVE-2017-4924

CVE-2017-4924 is a VMware SVGA out-of-bounds write vulnerability that can allow a guest VM to execute code on the host. Affected products and versions (per provided docs): ESXi 6.5 prior to patch ESXi650-201707101-SG; VMware Workstation 12.x prior to 12.5.7; VMware Fusion 8.x prior to 8.5.8. The ...

CVE-2017-4924

VMware ESXi ESXi 6.5 without patch ESXi650-201707101-SG, Workstation 12.x before 12.5.7 and Fusion 8.x before 8.5.8 contain an out-of-bounds write vulnerability in SVGA device. This issue may allow a guest to execute code on the host...

VMware ESXi, vCenter Server, Fusion and Workstation updates resolve multiple security vulnerabilities

a. Out-of-bounds write vulnerability in SVGA VMware ESXi, Workstation and Fusion contain an out-of-bounds write vulnerability in SVGA device. This issue may allow a guest to execute code on the host. VMware would like to thank Nico Golde and Ralf-Philipp Weinmann of Comsecuris UG...

VMSA-2017-0015:VMware ESXi, vCenter Server, Fusion and Workstation updates resolve multiple security vulnerabilities

VMSA-2017-0015.2 VMware ESXi, vCenter Server, Fusion and Workstation updates resolve multiple security vulnerabilities VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2017-0015.2 VMware Security Advisory Severity: Critical VMware Security Advisory Synopsis: VMware ESXi, vCente...

The vulnerabilities of VMware ESXi, VMware Fusion, VMware Fusion Pro, Vmware Workstation Player, and Vmware Workstation Pro allow attackers to execute arbitrary code.

The vulnerability of VMware ESXi, VMware Fusion, VMware Fusion Pro, Vmware Workstation Player, and Vmware Workstation Pro lies in buffer overflows in SVGA memory. Exploiting this vulnerability allows a local attacker to execute arbitrary code on the host system...

The vulnerabilities of VMware ESXi, VMware Fusion, Vmware Workstation Player, and Vmware Workstation Pro allow attackers to execute arbitrary code.

The vulnerability of VMware ESXi, VMware Fusion, Vmware Workstation Player, and Vmware Workstation Pro lies in the unauthorized use of the SVGA memory stack. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the host system...

Null pointer dereference

VMware Workstation Pro/Player 12.x before 12.5.3 contains a NULL pointer dereference vulnerability that exists in the SVGA driver. Successful exploitation of this issue may allow attackers with normal user privileges to crash their VMs...

CVE-2017-4902

VMware ESXi 6.5 without patch ESXi650-201703410-SG and 5.5 without patch ESXi550-201703401-SG; Workstation Pro / Player 12.x prior to 12.5.5; and Fusion Pro / Fusion 8.x prior to 8.5.6 have a Heap Buffer Overflow in SVGA. This issue may allow a guest to execute code on the host...

CVE-2017-4899

VMware Workstation Pro/Player 12.x before 12.5.3 contains a security vulnerability that exists in the SVGA driver. An attacker may exploit this issue to crash the VM or trigger an out-of-bound read. Note: This issue can be triggered only when the host has no graphics card or no graphics drivers a...

CVE-2017-4900

VMware Workstation Pro/Player 12.x before 12.5.3 contains a NULL pointer dereference vulnerability that exists in the SVGA driver. Successful exploitation of this issue may allow attackers with normal user privileges to crash their VMs...

Heap overflow

VMware ESXi 6.5 without patch ESXi650-201703410-SG and 5.5 without patch ESXi550-201703401-SG; Workstation Pro / Player 12.x prior to 12.5.5; and Fusion Pro / Fusion 8.x prior to 8.5.6 have a Heap Buffer Overflow in SVGA. This issue may allow a guest to execute code on the host...

CVE-2017-4899

VMware Workstation Pro/Player 12.x before 12.5.3 contains a security vulnerability that exists in the SVGA driver. An attacker may exploit this issue to crash the VM or trigger an out-of-bound read. Note: This issue can be triggered only when the host has no graphics card or no graphics drivers a...

Design/Logic Flaw

VMware Workstation Pro/Player 12.x before 12.5.3 contains a security vulnerability that exists in the SVGA driver. An attacker may exploit this issue to crash the VM or trigger an out-of-bound read. Note: This issue can be triggered only when the host has no graphics card or no graphics drivers a...

Code injection

VMware ESXi 6.5 without patch ESXi650-201703410-SG, 6.0 U3 without patch ESXi600-201703401-SG, 6.0 U2 without patch ESXi600-201703403-SG, 6.0 U1 without patch ESXi600-201703402-SG, and 5.5 without patch ESXi550-201703401-SG; Workstation Pro / Player 12.x prior to 12.5.5; and Fusion Pro / Fusion 8...

CVE-2017-4903

VMware ESXi 6.5 without patch ESXi650-201703410-SG, 6.0 U3 without patch ESXi600-201703401-SG, 6.0 U2 without patch ESXi600-201703403-SG, 6.0 U1 without patch ESXi600-201703402-SG, and 5.5 without patch ESXi550-201703401-SG; Workstation Pro / Player 12.x prior to 12.5.5; and Fusion Pro / Fusion 8...

CVE-2017-4902

VMware ESXi 6.5 without patch ESXi650-201703410-SG and 5.5 without patch ESXi550-201703401-SG; Workstation Pro / Player 12.x prior to 12.5.5; and Fusion Pro / Fusion 8.x prior to 8.5.6 have a Heap Buffer Overflow in SVGA. This issue may allow a guest to execute code on the host...