Vulners
Lucene search
VMware WorkStation 12.5.5 - Virtual Machine Escape Exploit
| Reporter | Title | Published | Views | Family All 21 |
|---|---|---|---|---|
 | VMware WorkStation 12.5.3 - Virtual Machine Escape Exploit | 25 Nov 201900:00 | – | zdt |
 | The vulnerability of DnD supervisor functions in VMware Fusion and VMware Workstation allows a hacker to execute arbitrary code. | 23 Jun 201700:00 | – | bdu_fstec |
 | CVE-2017-4901 | 14 Nov 202406:09 | – | circl |
 | Memory Corruption Vulnerability in Multiple VMware Products (CNVD-2017-03742) | 20 Mar 201700:00 | – | cnvd |
 | CVE-2017-4901 | 8 Jun 201713:00 | – | cve |
 | CVE-2017-4901 | 8 Jun 201713:00 | – | cvelist |
 | VMware WorkStation 12.5.5 - Virtual Machine Escape | 8 Aug 201700:00 | – | exploitdb |
 | VMware WorkStation 12.5.5 - Virtual Machine Escape | 8 Aug 201700:00 | – | exploitpack |
| VMware WorkStation 12.5.3 - Virtual Machine Escape | 6 Jun 201900:00 | – | exploitpack |
 | KLA11037 Arbitrary code execution vulnerability in VMware products | 14 Mar 201700:00 | – | kaspersky |
10
# VMware Escape Exploit
VMware Escape Exploit before VMware WorkStation 12.5.5
Host Target: Win10 x64
Compiler: VS2013
Test on VMware 12.5.2 build-4638234
# Known issues
* Failing to heap manipulation causes host process crash.
* Not quite elaborate because I'm not good at doing heap "fengshui" on winows LFH.
# FAQ
* Q: Error in reboot vmware after crashing process.
* A: Just remove ***.lck** folder in your vm directory or wait a while and have a coffee :).Here is a simple [script](https://raw.githubusercontent.com/unamer/vmware_escape/master/cve-2017-4901/cleanvm.bat) I used to clean up.
EDB Note ~ Download: https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/47714.zip
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
25 Nov 2019 00:00Current
0.6Low risk
Vulners AI Score0.6
CVSS 27.5
CVSS 39.9
EPSS0.14118