Lucene search

K
zdiHahna Latonick and Kevin FujimotoZDI-18-779
HistoryJul 26, 2018 - 12:00 a.m.

VMware Workstation SetGuestInfo Null Pointer Dereference Denial of Service Vulnerability

2018-07-2600:00:00
Hahna Latonick and Kevin Fujimoto
www.zerodayinitiative.com
11

0.002 Low

EPSS

Percentile

64.9%

This vulnerability allows local attackers to deny service on vulnerable installations of VMware Workstation. An attacker must first obtain the ability to execute low-privileged code on a guest OS in order to exploit this vulnerability. The specific flaw exists within the SetGuestInfo RPC function. A crafted request can trigger the dereference of a null pointer. An attacker can leverage this vulnerability to create a denial-of-service condition to users of the guest OS.

0.002 Low

EPSS

Percentile

64.9%