VMware Workstation 12 Pro Denial Of Service

/ Title: NULL pointer dereference vulnerability in vstor2 driver VMware Workstation Pro/Player CVE: 2017-4916 VMSA-2017-0009 Author: Borja Merino @BorjaMerino Date: May 18, 2017 Tested on: Windows 10 Pro and Windows 7 Pro SP1 with VMwareAr Workstation 12 Pro 12.5.5 build-5234757 Affected: VMware...

CVE-2017-4900: NULL Pointer Dereference

VMware Workstation Pro/Player 12.x before 12.5.3 contains a NULL pointer dereference vulnerability that exists in the SVGA driver. Successful exploitation of this issue may allow attackers with normal user privileges to crash their VMs...

PT-2017-16191

Name of the Vulnerable Software and Affected Versions VMware Workstation Pro/Player versions prior to 12.5.3 Description The issue is related to a NULL pointer dereference in the SVGA driver. This could allow attackers with normal user privileges to crash their virtual machines. Recommendations F...

PT-2017-16190

Name of the Vulnerable Software and Affected Versions VMware Workstation Pro/Player versions prior to 12.5.3 Description The issue exists in the SVGA driver, allowing an attacker to crash the VM or trigger an out-of-bound read. This can be triggered only when the host has no graphics card or no...

PT-2017-16189

Name of the Vulnerable Software and Affected Versions VMware Workstation Pro/Player versions prior to 12.5.3 Description The issue is related to a DLL loading vulnerability in the "vmware-vmx" process, which loads DLLs from a path defined in the local environment-variable. This could allow normal...

CVE-2017-4898: Undefined Security Weakness

VMware Workstation Pro/Player 12.x before 12.5.3 contains a DLL loading vulnerability that occurs due to the "vmware-vmx" process loading DLLs from a path defined in the local environment-variable. Successful exploitation of this issue may allow normal users to escalate privileges to System in th...

CVE-2017-4899: Out-of-bounds Read

VMware Workstation Pro/Player 12.x before 12.5.3 contains a security vulnerability that exists in the SVGA driver. An attacker may exploit this issue to crash the VM or trigger an out-of-bound read. Note: This issue can be triggered only when the host has no graphics card or no graphics drivers a...

PT-2017-16200

Name of the Vulnerable Software and Affected Versions VMware Workstation Pro/Player affected versions not specified Description The issue is a NULL pointer dereference vulnerability in the vstor2 driver. This vulnerability can be exploited by host users with normal user privileges, potentially...

CVE-2017-4916: NULL Pointer Dereference

VMware Workstation Pro/Player contains a NULL pointer dereference vulnerability that exists in the vstor2 driver. Successful exploitation of this issue may allow host users with normal user privileges to trigger a denial-of-service in a Windows host machine...

PT-2017-16199

Name of the Vulnerable Software and Affected Versions VMware Workstation Pro/Player affected versions not specified Description The issue is related to an insecure library loading vulnerability via ALSA sound driver configuration files. This could allow unprivileged host users to escalate their...

CVE-2017-4915: Incorrect Authorization

VMware Workstation Pro/Player contains an insecure library loading vulnerability via ALSA sound driver configuration files. Successful exploitation of this issue may allow unprivileged host users to escalate their privileges to root in a Linux host machine...